./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product09_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 635dfa2a Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product09_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 87a4c5e21ab7f26123006d2ec745b45fb5a5e887 .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-635dfa2 [2018-12-08 08:07:42,931 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-12-08 08:07:42,932 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-12-08 08:07:42,938 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-12-08 08:07:42,939 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-12-08 08:07:42,939 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-12-08 08:07:42,940 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-12-08 08:07:42,940 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-12-08 08:07:42,941 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-12-08 08:07:42,942 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-12-08 08:07:42,942 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-12-08 08:07:42,942 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-12-08 08:07:42,943 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-12-08 08:07:42,943 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-12-08 08:07:42,944 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-12-08 08:07:42,944 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-12-08 08:07:42,944 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-12-08 08:07:42,945 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-12-08 08:07:42,946 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-12-08 08:07:42,947 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-12-08 08:07:42,948 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-12-08 08:07:42,948 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-12-08 08:07:42,949 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-12-08 08:07:42,949 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-12-08 08:07:42,950 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-12-08 08:07:42,950 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-12-08 08:07:42,951 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-12-08 08:07:42,951 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-12-08 08:07:42,951 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-12-08 08:07:42,952 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-12-08 08:07:42,952 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-12-08 08:07:42,952 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-12-08 08:07:42,952 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-12-08 08:07:42,953 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-12-08 08:07:42,953 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-12-08 08:07:42,953 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-12-08 08:07:42,954 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-12-08 08:07:42,961 INFO L110 SettingsManager]: Loading preferences was successful [2018-12-08 08:07:42,962 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-12-08 08:07:42,962 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-12-08 08:07:42,962 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-12-08 08:07:42,962 INFO L133 SettingsManager]: * Use SBE=true [2018-12-08 08:07:42,963 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-12-08 08:07:42,963 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-12-08 08:07:42,963 INFO L133 SettingsManager]: * Use old map elimination=false [2018-12-08 08:07:42,963 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-12-08 08:07:42,963 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-12-08 08:07:42,963 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-12-08 08:07:42,963 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-12-08 08:07:42,963 INFO L133 SettingsManager]: * sizeof long=4 [2018-12-08 08:07:42,963 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-12-08 08:07:42,963 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-12-08 08:07:42,964 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-12-08 08:07:42,964 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-12-08 08:07:42,964 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-12-08 08:07:42,964 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-12-08 08:07:42,964 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-12-08 08:07:42,964 INFO L133 SettingsManager]: * sizeof long double=12 [2018-12-08 08:07:42,964 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-12-08 08:07:42,964 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-12-08 08:07:42,964 INFO L133 SettingsManager]: * Use constant arrays=true [2018-12-08 08:07:42,964 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-12-08 08:07:42,964 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-12-08 08:07:42,965 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-12-08 08:07:42,965 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-12-08 08:07:42,965 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-12-08 08:07:42,965 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-12-08 08:07:42,965 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-12-08 08:07:42,965 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-12-08 08:07:42,966 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 87a4c5e21ab7f26123006d2ec745b45fb5a5e887 [2018-12-08 08:07:42,983 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-12-08 08:07:42,990 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-12-08 08:07:42,992 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-12-08 08:07:42,994 INFO L271 PluginConnector]: Initializing CDTParser... [2018-12-08 08:07:42,994 INFO L276 PluginConnector]: CDTParser initialized [2018-12-08 08:07:42,994 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product09_true-unreach-call_true-termination.cil.c [2018-12-08 08:07:43,031 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/data/a696b968e/88fcd0b19da94ff0b8b41c6d8caf66b9/FLAG5c9aa5c59 [2018-12-08 08:07:43,578 INFO L307 CDTParser]: Found 1 translation units. [2018-12-08 08:07:43,578 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/sv-benchmarks/c/product-lines/elevator_spec3_product09_true-unreach-call_true-termination.cil.c [2018-12-08 08:07:43,587 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/data/a696b968e/88fcd0b19da94ff0b8b41c6d8caf66b9/FLAG5c9aa5c59 [2018-12-08 08:07:44,066 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/data/a696b968e/88fcd0b19da94ff0b8b41c6d8caf66b9 [2018-12-08 08:07:44,068 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-12-08 08:07:44,069 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-12-08 08:07:44,069 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-12-08 08:07:44,070 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-12-08 08:07:44,072 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-12-08 08:07:44,072 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.12 08:07:44" (1/1) ... [2018-12-08 08:07:44,075 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4aee6359 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 08:07:44, skipping insertion in model container [2018-12-08 08:07:44,075 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.12 08:07:44" (1/1) ... [2018-12-08 08:07:44,080 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-12-08 08:07:44,121 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-12-08 08:07:44,450 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-12-08 08:07:44,458 INFO L191 MainTranslator]: Completed pre-run [2018-12-08 08:07:44,522 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-12-08 08:07:44,546 INFO L195 MainTranslator]: Completed translation [2018-12-08 08:07:44,546 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 08:07:44 WrapperNode [2018-12-08 08:07:44,546 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-12-08 08:07:44,547 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-12-08 08:07:44,547 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-12-08 08:07:44,547 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-12-08 08:07:44,552 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 08:07:44" (1/1) ... [2018-12-08 08:07:44,567 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 08:07:44" (1/1) ... [2018-12-08 08:07:44,694 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-12-08 08:07:44,695 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-12-08 08:07:44,695 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-12-08 08:07:44,695 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-12-08 08:07:44,701 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 08:07:44" (1/1) ... [2018-12-08 08:07:44,701 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 08:07:44" (1/1) ... [2018-12-08 08:07:44,717 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 08:07:44" (1/1) ... [2018-12-08 08:07:44,718 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 08:07:44" (1/1) ... [2018-12-08 08:07:44,757 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 08:07:44" (1/1) ... [2018-12-08 08:07:44,793 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 08:07:44" (1/1) ... [2018-12-08 08:07:44,809 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 08:07:44" (1/1) ... [2018-12-08 08:07:44,833 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-12-08 08:07:44,834 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-12-08 08:07:44,834 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-12-08 08:07:44,834 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-12-08 08:07:44,834 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 08:07:44" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:07:44,868 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-12-08 08:07:44,868 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-12-08 08:07:44,868 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-12-08 08:07:44,868 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-12-08 08:07:49,727 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-12-08 08:07:49,727 INFO L280 CfgBuilder]: Removed 1227 assue(true) statements. [2018-12-08 08:07:49,727 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.12 08:07:49 BoogieIcfgContainer [2018-12-08 08:07:49,727 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-12-08 08:07:49,728 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-12-08 08:07:49,728 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-12-08 08:07:49,731 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-12-08 08:07:49,731 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-08 08:07:49,732 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 08.12 08:07:44" (1/3) ... [2018-12-08 08:07:49,732 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5e257ade and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 08.12 08:07:49, skipping insertion in model container [2018-12-08 08:07:49,732 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-08 08:07:49,733 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 08:07:44" (2/3) ... [2018-12-08 08:07:49,733 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5e257ade and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 08.12 08:07:49, skipping insertion in model container [2018-12-08 08:07:49,733 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-08 08:07:49,733 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.12 08:07:49" (3/3) ... [2018-12-08 08:07:49,734 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product09_true-unreach-call_true-termination.cil.c [2018-12-08 08:07:49,772 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-12-08 08:07:49,772 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-12-08 08:07:49,772 INFO L375 BuchiCegarLoop]: Hoare is false [2018-12-08 08:07:49,772 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-12-08 08:07:49,773 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-12-08 08:07:49,773 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-12-08 08:07:49,773 INFO L379 BuchiCegarLoop]: Difference is false [2018-12-08 08:07:49,773 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-12-08 08:07:49,773 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-12-08 08:07:49,821 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5853 states. [2018-12-08 08:07:49,886 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1188 [2018-12-08 08:07:49,886 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:07:49,886 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:07:49,896 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:07:49,897 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:07:49,897 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-12-08 08:07:49,897 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5853 states. [2018-12-08 08:07:49,930 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1188 [2018-12-08 08:07:49,930 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:07:49,930 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:07:49,933 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:07:49,933 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:07:49,939 INFO L794 eck$LassoCheckResult]: Stem: 3655#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 4753#L-1true havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 2184#L2420true havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 1939#L2428true main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 3932#L2767true assume 0 != main_~tmp~19; 5488#L2744true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2498#L237true havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1332#L868true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 5406#L893true bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1661#L515true assume 0 == initPersonOnFloor_~floor; 1324#L516true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5752#L623-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2131#L307true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2810#L319-2true havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4293#L1174true __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 924#L1226true __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1779#L2804true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 1705#L2805true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2112#L1191true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 420#L1212true __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 1149#L2809true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 4507#L2910true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 548#L244true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5723#L271true stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3243#L1787true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 3897#L1799true timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 4844#L1938true assume !(0 != timeShift_~tmp___9~2); 4661#L2029true assume !(1 == ~doorState~0); 4665#L2029-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2558#L1378true assume !(1 == stopRequestedInDirection_~dir); 1954#L1547true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3120#L1700true timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 5661#L2037true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 992#L1754true assume !(1 == ~currentHeading~0); 4711#L1764true assume !(0 == ~currentFloorID~0); 4713#L1764-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5790#L1770-5true havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4349#L2935true assume !(-1 == ~expectedDirection~0); 2292#L2947true assume !(1 == ~expectedDirection~0); 2371#L2948true havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4297#L1174-1true __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 894#L1226-3true __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1777#L2804-1true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1895#L2866-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2079#L1191-16true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 365#L1212-16true __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 3104#L2870-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 4516#L2910-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 515#L244-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5827#L271-21true stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3247#L1787-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 3899#L1799-1true timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 4849#L1938-1true assume !(0 != timeShift_~tmp___9~2); 4669#L2029-3true assume !(1 == ~doorState~0); 4517#L2029-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2564#L1378-2true assume !(1 == stopRequestedInDirection_~dir); 1926#L1547-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3125#L1700-2true timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 5645#L2037-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 961#L1754-3true assume !(1 == ~currentHeading~0); 4703#L1764-9true assume !(0 == ~currentFloorID~0); 4689#L1764-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5780#L1770-11true havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4352#L2935-1true assume !(-1 == ~expectedDirection~0); 2294#L2947-1true assume !(1 == ~expectedDirection~0); 2370#L2948-1true havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4265#L1174-2true __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 870#L1226-6true __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1783#L2804-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1903#L2866-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2050#L1191-27true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 330#L1212-27true __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 3108#L2870-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 4522#L2910-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 471#L244-42true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5792#L271-42true stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3213#L1787-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 3902#L1799-2true timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 4854#L1938-2true assume !(0 != timeShift_~tmp___9~2); 4514#L2029-6true assume !(1 == ~doorState~0); 4525#L2029-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2685#L1378-4true assume !(1 == stopRequestedInDirection_~dir); 1934#L1547-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3136#L1700-4true timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 5644#L2037-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 928#L1754-6true assume !(1 == ~currentHeading~0); 4677#L1764-18true assume !(0 == ~currentFloorID~0); 4685#L1764-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5604#L1770-17true havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4358#L2935-2true assume !(-1 == ~expectedDirection~0); 2297#L2947-2true assume !(1 == ~expectedDirection~0); 2372#L2948-2true havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1334#L868-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 5408#L893-1true bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1664#L515-1true assume 0 == initPersonOnFloor_~floor; 1326#L516-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5755#L623-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2136#L307-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2821#L319-5true havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4268#L1174-3true __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 878#L1226-9true __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1791#L2804-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 1680#L2805-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2040#L1191-33true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 564#L1212-33true __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 1135#L2809-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 4519#L2910-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 118#L244-63true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5605#L271-63true stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3221#L1787-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 3889#L1799-3true timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 4852#L1938-3true assume !(0 != timeShift_~tmp___9~2); 4494#L2029-9true assume !(1 == ~doorState~0); 4497#L2029-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2689#L1378-6true assume !(1 == stopRequestedInDirection_~dir); 1943#L1547-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3364#L1700-6true timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 5647#L2037-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 943#L1754-9true assume !(1 == ~currentHeading~0); 4511#L1764-27true assume !(0 == ~currentFloorID~0); 4515#L1764-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5584#L1770-23true havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4331#L2935-3true assume !(-1 == ~expectedDirection~0); 2301#L2947-3true assume !(1 == ~expectedDirection~0); 2373#L2948-3true cleanup_~i~3 := 0; 3663#L2576-2true [2018-12-08 08:07:49,940 INFO L796 eck$LassoCheckResult]: Loop: 3663#L2576-2true assume !false; 3454#L2577true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3194#L2580true assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 2589#L1025true cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 4432#L2584true assume 1 != cleanup_~tmp___0~8; 4430#L2584-1true havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 33#L244-84true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5545#L271-84true anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 1974#L1282true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 3497#L1346true isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 3971#L1359true cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 2365#L2596true assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4275#L1174-4true __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 859#L1226-12true __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1796#L2804-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1870#L2866-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1881#L1191-49true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 509#L1212-49true __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 3091#L2870-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 4523#L2910-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 273#L244-89true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5559#L271-89true stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3220#L1787-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 3888#L1799-4true timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 4828#L1938-4true assume !(0 != timeShift_~tmp___9~2); 4501#L2029-12true assume 1 == ~doorState~0;~doorState~0 := 0; 4503#L2029-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2693#L1378-8true assume !(1 == stopRequestedInDirection_~dir); 1910#L1547-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3373#L1700-8true timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 5652#L2037-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 906#L1754-12true assume !(1 == ~currentHeading~0); 4504#L1764-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4487#L1764-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5572#L1770-29true havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4327#L2935-4true assume !(-1 == ~expectedDirection~0); 2299#L2947-4true assume !(1 == ~expectedDirection~0); 2374#L2948-4true cleanup_~i~3 := 1 + cleanup_~i~3; 3663#L2576-2true [2018-12-08 08:07:49,944 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:07:49,944 INFO L82 PathProgramCache]: Analyzing trace with hash -568130459, now seen corresponding path program 1 times [2018-12-08 08:07:49,945 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:07:49,946 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:07:49,976 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:49,976 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:07:49,976 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:50,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:07:50,147 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:07:50,149 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:07:50,149 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 08:07:50,153 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:07:50,153 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:07:50,153 INFO L82 PathProgramCache]: Analyzing trace with hash 914140713, now seen corresponding path program 1 times [2018-12-08 08:07:50,153 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:07:50,154 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:07:50,154 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:50,155 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:07:50,155 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:50,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:07:50,217 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:07:50,217 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:07:50,217 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-12-08 08:07:50,218 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:07:50,227 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-12-08 08:07:50,228 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-12-08 08:07:50,229 INFO L87 Difference]: Start difference. First operand 5853 states. Second operand 6 states. [2018-12-08 08:07:53,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:07:53,229 INFO L93 Difference]: Finished difference Result 14697 states and 27598 transitions. [2018-12-08 08:07:53,230 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-12-08 08:07:53,231 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14697 states and 27598 transitions. [2018-12-08 08:07:53,284 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3397 [2018-12-08 08:07:53,333 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14697 states to 14627 states and 27517 transitions. [2018-12-08 08:07:53,334 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14627 [2018-12-08 08:07:53,344 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14627 [2018-12-08 08:07:53,345 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14627 states and 27517 transitions. [2018-12-08 08:07:53,362 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:07:53,362 INFO L705 BuchiCegarLoop]: Abstraction has 14627 states and 27517 transitions. [2018-12-08 08:07:53,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14627 states and 27517 transitions. [2018-12-08 08:07:53,505 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14627 to 9729. [2018-12-08 08:07:53,506 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9729 states. [2018-12-08 08:07:53,516 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9729 states to 9729 states and 18316 transitions. [2018-12-08 08:07:53,517 INFO L728 BuchiCegarLoop]: Abstraction has 9729 states and 18316 transitions. [2018-12-08 08:07:53,517 INFO L608 BuchiCegarLoop]: Abstraction has 9729 states and 18316 transitions. [2018-12-08 08:07:53,517 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-12-08 08:07:53,517 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9729 states and 18316 transitions. [2018-12-08 08:07:53,536 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2181 [2018-12-08 08:07:53,537 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:07:53,537 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:07:53,539 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:07:53,539 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:07:53,539 INFO L794 eck$LassoCheckResult]: Stem: 25284#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 25285#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 23832#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 23442#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 23443#L2767 assume 0 != main_~tmp~19; 25575#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 24121#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 22904#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 22843#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 23152#L515 assume 0 == initPersonOnFloor_~floor; 22897#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 21084#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 23742#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 23501#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 24409#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22175#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 22176#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 23169#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 23170#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 21479#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 21480#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 21843#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 21688#L244 assume !(0 == isFloorCalling_~floorID); 21055#L248 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 21056#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 24751#L1787 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 24752#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 25541#L1938 assume !(0 != timeShift_~tmp___9~2); 26082#L2029 assume !(1 == ~doorState~0); 26083#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 24181#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 24182#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 24122#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 21046#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 24555#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 22329#L1754 assume !(1 == ~currentHeading~0); 22330#L1764 assume !(0 == ~currentFloorID~0); 26159#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26149#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 25820#L2935 assume !(-1 == ~expectedDirection~0); 23919#L2947 assume !(1 == ~expectedDirection~0); 23527#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 23993#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22107#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 22108#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 23179#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 23358#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 21652#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 21654#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 22853#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 24973#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 25913#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 22312#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 24756#L1787-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 24757#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 25543#L1938-1 assume !(0 != timeShift_~tmp___9~2); 26095#L2029-3 assume !(1 == ~doorState~0); 25914#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 24189#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 24190#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 21318#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 24563#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 22259#L1754-3 assume !(1 == ~currentHeading~0); 22260#L1764-9 assume !(0 == ~currentFloorID~0); 26127#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26105#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 25821#L2935-1 assume !(-1 == ~expectedDirection~0); 23921#L2947-1 assume !(1 == ~expectedDirection~0); 23528#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 23992#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22055#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 22056#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 23183#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 23373#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 21660#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 21662#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 22859#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 24978#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 25921#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 22105#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 24697#L1787-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 24698#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 25546#L1938-2 assume !(0 != timeShift_~tmp___9~2); 25911#L2029-6 assume !(1 == ~doorState~0); 25912#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 24301#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 24302#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 30109#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 30107#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 30106#L1754-6 assume !(1 == ~currentHeading~0); 30105#L1764-18 assume !(0 == ~currentFloorID~0); 26108#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26081#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 25822#L2935-2 assume !(-1 == ~expectedDirection~0); 23924#L2947-2 assume !(1 == ~expectedDirection~0); 23519#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 22905#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 22850#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 23154#L515-1 assume 0 == initPersonOnFloor_~floor; 22899#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 21099#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 23749#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 23505#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 24420#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22073#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 22074#L2804-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 23163#L2805-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 23165#L2815-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 23601#L1191-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 21714#L1212-34 __utac_acc__Specification3_spec__1_#t~ret115 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret115;havoc __utac_acc__Specification3_spec__1_#t~ret115; 21715#L2820-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 24953#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 25917#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 22623#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 24712#L1787-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 24713#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 25533#L1938-3 assume !(0 != timeShift_~tmp___9~2); 25882#L2029-9 assume !(1 == ~doorState~0); 25883#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 24308#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 24309#L1547-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 24910#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 24911#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 26594#L1754-9 assume !(1 == ~currentHeading~0); 30196#L1764-27 assume !(0 == ~currentFloorID~0); 25906#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 25885#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 25814#L2935-3 assume !(-1 == ~expectedDirection~0); 23928#L2947-3 assume !(1 == ~expectedDirection~0); 23520#L2948-3 cleanup_~i~3 := 0; 23994#L2576-2 [2018-12-08 08:07:53,539 INFO L796 eck$LassoCheckResult]: Loop: 23994#L2576-2 assume !false; 25040#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 24663#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 24218#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 24219#L2584 assume 1 != cleanup_~tmp___0~8; 25839#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 20660#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 20661#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 23507#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 21235#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 25108#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 23984#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 23985#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22032#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 22033#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 23189#L2866-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 23310#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 21603#L2887-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 21605#L2898-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 22822#L2909-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 24957#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 25922#L244-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 22364#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 24710#L1787-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 24711#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 25532#L1938-4 assume !(0 != timeShift_~tmp___9~2); 25892#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 25893#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 24315#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 24316#L1547-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 21270#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 24922#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 30156#L1754-12 assume !(1 == ~currentHeading~0); 30192#L1764-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 25873#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 25869#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 25813#L2935-4 assume !(-1 == ~expectedDirection~0); 23926#L2947-4 assume !(1 == ~expectedDirection~0); 23522#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 23994#L2576-2 [2018-12-08 08:07:53,539 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:07:53,540 INFO L82 PathProgramCache]: Analyzing trace with hash -2119866386, now seen corresponding path program 1 times [2018-12-08 08:07:53,540 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:07:53,540 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:07:53,540 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:53,540 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:07:53,541 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:53,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:07:53,587 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:07:53,587 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:07:53,587 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 08:07:53,588 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:07:53,588 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:07:53,588 INFO L82 PathProgramCache]: Analyzing trace with hash 844132719, now seen corresponding path program 1 times [2018-12-08 08:07:53,588 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:07:53,588 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:07:53,588 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:53,588 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:07:53,588 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:53,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:07:53,608 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:07:53,609 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:07:53,609 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-12-08 08:07:53,609 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:07:53,609 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-12-08 08:07:53,609 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-12-08 08:07:53,609 INFO L87 Difference]: Start difference. First operand 9729 states and 18316 transitions. cyclomatic complexity: 8588 Second operand 6 states. [2018-12-08 08:07:53,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:07:53,943 INFO L93 Difference]: Finished difference Result 17431 states and 32910 transitions. [2018-12-08 08:07:53,944 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-12-08 08:07:53,944 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17431 states and 32910 transitions. [2018-12-08 08:07:54,001 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3994 [2018-12-08 08:07:54,058 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17431 states to 17431 states and 32910 transitions. [2018-12-08 08:07:54,058 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17431 [2018-12-08 08:07:54,068 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17431 [2018-12-08 08:07:54,069 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17431 states and 32910 transitions. [2018-12-08 08:07:54,082 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:07:54,082 INFO L705 BuchiCegarLoop]: Abstraction has 17431 states and 32910 transitions. [2018-12-08 08:07:54,095 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17431 states and 32910 transitions. [2018-12-08 08:07:54,257 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17431 to 9747. [2018-12-08 08:07:54,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9747 states. [2018-12-08 08:07:54,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9747 states to 9747 states and 18334 transitions. [2018-12-08 08:07:54,266 INFO L728 BuchiCegarLoop]: Abstraction has 9747 states and 18334 transitions. [2018-12-08 08:07:54,266 INFO L608 BuchiCegarLoop]: Abstraction has 9747 states and 18334 transitions. [2018-12-08 08:07:54,267 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-12-08 08:07:54,267 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9747 states and 18334 transitions. [2018-12-08 08:07:54,285 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2185 [2018-12-08 08:07:54,286 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:07:54,286 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:07:54,288 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:07:54,289 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:07:54,289 INFO L794 eck$LassoCheckResult]: Stem: 52395#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 52396#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 50975#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 50585#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 50586#L2767 assume 0 != main_~tmp~19; 52689#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 51261#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 50070#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 50009#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 50302#L515 assume 0 == initPersonOnFloor_~floor; 50063#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 48274#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 50885#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 50642#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 51542#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 49352#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 49353#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 50317#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 50318#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 48668#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 48669#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 49025#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 48872#L244 assume !(0 == isFloorCalling_~floorID); 48248#L248 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 48249#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 51878#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 50823#L1191-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 48611#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 48612#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 52889#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 53956#L1938 assume !(0 != timeShift_~tmp___9~2); 53184#L2029 assume !(1 == ~doorState~0); 53185#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 51322#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 51323#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 51262#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 48237#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 51683#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 49506#L1754 assume !(1 == ~currentHeading~0); 49507#L1764 assume !(0 == ~currentFloorID~0); 53258#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53247#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 54183#L2935 assume !(-1 == ~expectedDirection~0); 54179#L2947 assume !(1 == ~expectedDirection~0); 54178#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 54177#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 54176#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 54174#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 54175#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 54193#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 54187#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 54185#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 54142#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 54138#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 54133#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 54129#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 54126#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 54123#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 54118#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 54116#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 54115#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 54110#L1938-1 assume !(0 != timeShift_~tmp___9~2); 54108#L2029-3 assume !(1 == ~doorState~0); 54088#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 54085#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 54082#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 54062#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 54059#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 54057#L1754-3 assume !(1 == ~currentHeading~0); 54055#L1764-9 assume !(0 == ~currentFloorID~0); 53227#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53205#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 52935#L2935-1 assume !(-1 == ~expectedDirection~0); 51064#L2947-1 assume !(1 == ~expectedDirection~0); 50669#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 51135#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 49231#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 49232#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 50325#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 50513#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 48844#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 48846#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 50025#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 52101#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 54273#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 54269#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 54268#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 54266#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 54262#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 54054#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 54053#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 54052#L1938-2 assume !(0 != timeShift_~tmp___9~2); 54051#L2029-6 assume !(1 == ~doorState~0); 54050#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 54049#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 53968#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 53966#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 53963#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 53961#L1754-6 assume !(1 == ~currentHeading~0); 53959#L1764-18 assume !(0 == ~currentFloorID~0); 53208#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53182#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 52936#L2935-2 assume !(-1 == ~expectedDirection~0); 51067#L2947-2 assume !(1 == ~expectedDirection~0); 50660#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 50071#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 50015#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 50304#L515-1 assume 0 == initPersonOnFloor_~floor; 50065#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 48289#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 50892#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 50646#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 51550#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 49249#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 49250#L2804-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 50311#L2805-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 50313#L2815-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 50742#L1191-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 48897#L1212-34 __utac_acc__Specification3_spec__1_#t~ret115 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret115;havoc __utac_acc__Specification3_spec__1_#t~ret115; 48898#L2820-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 52078#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 53838#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 53832#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 53831#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 53829#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 53823#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 53818#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 53816#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 53814#L1938-3 assume !(0 != timeShift_~tmp___9~2); 53813#L2029-9 assume !(1 == ~doorState~0); 53812#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 53810#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 53781#L1547-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 53772#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 53770#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 53771#L1754-9 assume !(1 == ~currentHeading~0); 53801#L1764-27 assume !(0 == ~currentFloorID~0); 53019#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 52998#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 52928#L2935-3 assume !(-1 == ~expectedDirection~0); 51071#L2947-3 assume !(1 == ~expectedDirection~0); 50661#L2948-3 cleanup_~i~3 := 0; 51137#L2576-2 [2018-12-08 08:07:54,289 INFO L796 eck$LassoCheckResult]: Loop: 51137#L2576-2 assume !false; 52160#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 51791#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 51356#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 51357#L2584 assume 1 != cleanup_~tmp___0~8; 52954#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 47853#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 47854#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 50648#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 48424#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 52223#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 51127#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 51128#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 49208#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 49209#L2804-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 50314#L2805-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 50316#L2815-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 50516#L1191-45 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 48847#L1212-45 __utac_acc__Specification3_spec__1_#t~ret115 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret115;havoc __utac_acc__Specification3_spec__1_#t~ret115; 48848#L2820-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 52083#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 53948#L244-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 53943#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 53942#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 53941#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 53932#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 53929#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 53928#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 53927#L1938-4 assume !(0 != timeShift_~tmp___9~2); 53926#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 53925#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 53924#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 53880#L1547-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 53875#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 53873#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 53874#L1754-12 assume !(1 == ~currentHeading~0); 53713#L1764-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 52988#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 52983#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 52927#L2935-4 assume !(-1 == ~expectedDirection~0); 51069#L2947-4 assume !(1 == ~expectedDirection~0); 50663#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 51137#L2576-2 [2018-12-08 08:07:54,292 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:07:54,292 INFO L82 PathProgramCache]: Analyzing trace with hash 1819172379, now seen corresponding path program 1 times [2018-12-08 08:07:54,292 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:07:54,292 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:07:54,293 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:54,293 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:07:54,293 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:54,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:07:54,366 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:07:54,366 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:07:54,366 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 08:07:54,367 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:07:54,367 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:07:54,367 INFO L82 PathProgramCache]: Analyzing trace with hash 410295228, now seen corresponding path program 1 times [2018-12-08 08:07:54,367 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:07:54,367 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:07:54,368 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:54,368 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:07:54,368 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:54,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:07:54,389 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:07:54,389 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:07:54,389 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 08:07:54,389 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:07:54,389 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 08:07:54,390 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 08:07:54,390 INFO L87 Difference]: Start difference. First operand 9747 states and 18334 transitions. cyclomatic complexity: 8588 Second operand 5 states. [2018-12-08 08:07:55,051 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:07:55,052 INFO L93 Difference]: Finished difference Result 18950 states and 35576 transitions. [2018-12-08 08:07:55,052 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-08 08:07:55,052 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18950 states and 35576 transitions. [2018-12-08 08:07:55,091 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4263 [2018-12-08 08:07:55,128 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18950 states to 18950 states and 35576 transitions. [2018-12-08 08:07:55,128 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18950 [2018-12-08 08:07:55,138 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18950 [2018-12-08 08:07:55,138 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18950 states and 35576 transitions. [2018-12-08 08:07:55,148 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:07:55,148 INFO L705 BuchiCegarLoop]: Abstraction has 18950 states and 35576 transitions. [2018-12-08 08:07:55,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18950 states and 35576 transitions. [2018-12-08 08:07:55,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18950 to 9747. [2018-12-08 08:07:55,244 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9747 states. [2018-12-08 08:07:55,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9747 states to 9747 states and 18278 transitions. [2018-12-08 08:07:55,252 INFO L728 BuchiCegarLoop]: Abstraction has 9747 states and 18278 transitions. [2018-12-08 08:07:55,252 INFO L608 BuchiCegarLoop]: Abstraction has 9747 states and 18278 transitions. [2018-12-08 08:07:55,252 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-12-08 08:07:55,252 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9747 states and 18278 transitions. [2018-12-08 08:07:55,267 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2185 [2018-12-08 08:07:55,267 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:07:55,267 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:07:55,269 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:07:55,269 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:07:55,270 INFO L794 eck$LassoCheckResult]: Stem: 81180#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 81181#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 79717#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 79320#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 79321#L2767 assume 0 != main_~tmp~19; 81472#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 80008#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 78803#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 78740#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 79041#L515 assume 0 == initPersonOnFloor_~floor; 78796#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 76990#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 79625#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 79380#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 80295#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 78082#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 78083#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 79056#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 79057#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 77383#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 77384#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 77742#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 77590#L244 assume !(0 == isFloorCalling_~floorID); 76964#L248 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 76965#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 80648#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 79561#L1191-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 77328#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 77329#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 81677#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 82537#L1938 assume !(0 != timeShift_~tmp___9~2); 81989#L2029 assume !(1 == ~doorState~0); 81990#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 80068#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 80069#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 80009#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 76953#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 80453#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 78235#L1754 assume !(1 == ~currentHeading~0); 78236#L1764 assume !(0 == ~currentFloorID~0); 82062#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 82052#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 81725#L2935 assume !(-1 == ~expectedDirection~0); 79806#L2947 assume !(1 == ~expectedDirection~0); 79406#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 79881#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 78013#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 78014#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 79234#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 79236#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 83838#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 78749#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 78751#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 80878#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 77532#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 77533#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 80653#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 80655#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 82746#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 82745#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 82744#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 82742#L1938-1 assume !(0 != timeShift_~tmp___9~2); 82741#L2029-3 assume !(1 == ~doorState~0); 82740#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 82734#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 82732#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 82713#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 82711#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 82712#L1754-3 assume !(1 == ~currentHeading~0); 82785#L1764-9 assume !(0 == ~currentFloorID~0); 82032#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 82010#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 84984#L2935-1 assume !(-1 == ~expectedDirection~0); 84981#L2947-1 assume !(1 == ~expectedDirection~0); 84980#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 84957#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 84950#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 84947#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 84948#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 86191#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 86190#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 78756#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 78758#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 80883#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 81828#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 82827#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 82693#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 82691#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 82687#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 82685#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 82684#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 82682#L1938-2 assume !(0 != timeShift_~tmp___9~2); 82681#L2029-6 assume !(1 == ~doorState~0); 82680#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 82679#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 82621#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 82620#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 82614#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 82615#L1754-6 assume !(1 == ~currentHeading~0); 82828#L1764-18 assume !(0 == ~currentFloorID~0); 82013#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 81988#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 83059#L2935-2 assume !(-1 == ~expectedDirection~0); 83056#L2947-2 assume !(1 == ~expectedDirection~0); 83055#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 83053#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 83048#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 83047#L515-1 assume 0 == initPersonOnFloor_~floor; 83029#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 83012#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 83007#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 83004#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 83002#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 82995#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 82979#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 82974#L2866-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 82973#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 82972#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 82971#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 82954#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 82951#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 82950#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 82945#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 82944#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 79231#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 77550#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 77551#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 81684#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 86192#L1938-3 assume !(0 != timeShift_~tmp___9~2); 81791#L2029-9 assume !(1 == ~doorState~0); 81792#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 80194#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 80195#L1547-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 77152#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 80814#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 82488#L1754-9 assume !(1 == ~currentHeading~0); 82535#L1764-27 assume !(0 == ~currentFloorID~0); 81816#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 81794#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 83978#L2935-3 assume !(-1 == ~expectedDirection~0); 83973#L2947-3 assume !(1 == ~expectedDirection~0); 79882#L2948-3 cleanup_~i~3 := 0; 79883#L2576-2 [2018-12-08 08:07:55,270 INFO L796 eck$LassoCheckResult]: Loop: 79883#L2576-2 assume !false; 80942#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 80560#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 80103#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 80104#L2584 assume 1 != cleanup_~tmp___0~8; 81748#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 76568#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 76569#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 79386#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 77139#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 83928#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 79872#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 79873#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 83927#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 83926#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 83925#L2866-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 80172#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 80173#L2887-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 83923#L2898-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 83907#L2909-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 83905#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 83904#L244-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 83836#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 83835#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 79167#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 77496#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 77497#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 81669#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 86189#L1938-4 assume !(0 != timeShift_~tmp___9~2); 81801#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 81802#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 80202#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 80203#L1547-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 77176#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 80826#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 82492#L1754-12 assume !(1 == ~currentHeading~0); 82529#L1764-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 81784#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 81779#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 83976#L2935-4 assume !(-1 == ~expectedDirection~0); 83970#L2947-4 assume !(1 == ~expectedDirection~0); 79884#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 79883#L2576-2 [2018-12-08 08:07:55,270 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:07:55,271 INFO L82 PathProgramCache]: Analyzing trace with hash -239744925, now seen corresponding path program 1 times [2018-12-08 08:07:55,271 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:07:55,271 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:07:55,273 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:55,273 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:07:55,273 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:55,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:07:55,330 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:07:55,330 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:07:55,330 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 08:07:55,330 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:07:55,330 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:07:55,331 INFO L82 PathProgramCache]: Analyzing trace with hash -1648622076, now seen corresponding path program 1 times [2018-12-08 08:07:55,331 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:07:55,331 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:07:55,331 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:55,331 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:07:55,332 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:55,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:07:55,366 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:07:55,366 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:07:55,366 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-08 08:07:55,366 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:07:55,366 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-12-08 08:07:55,366 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-12-08 08:07:55,367 INFO L87 Difference]: Start difference. First operand 9747 states and 18278 transitions. cyclomatic complexity: 8532 Second operand 7 states. [2018-12-08 08:07:57,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:07:57,377 INFO L93 Difference]: Finished difference Result 60210 states and 113358 transitions. [2018-12-08 08:07:57,377 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2018-12-08 08:07:57,377 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60210 states and 113358 transitions. [2018-12-08 08:07:57,528 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21754 [2018-12-08 08:07:57,652 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60210 states to 60210 states and 113358 transitions. [2018-12-08 08:07:57,652 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 60210 [2018-12-08 08:07:57,686 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 60210 [2018-12-08 08:07:57,686 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60210 states and 113358 transitions. [2018-12-08 08:07:57,722 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:07:57,723 INFO L705 BuchiCegarLoop]: Abstraction has 60210 states and 113358 transitions. [2018-12-08 08:07:57,750 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60210 states and 113358 transitions. [2018-12-08 08:07:57,958 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60210 to 19455. [2018-12-08 08:07:57,958 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 19455 states. [2018-12-08 08:07:57,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19455 states to 19455 states and 36473 transitions. [2018-12-08 08:07:57,977 INFO L728 BuchiCegarLoop]: Abstraction has 19455 states and 36473 transitions. [2018-12-08 08:07:57,977 INFO L608 BuchiCegarLoop]: Abstraction has 19455 states and 36473 transitions. [2018-12-08 08:07:57,977 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-12-08 08:07:57,977 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 19455 states and 36473 transitions. [2018-12-08 08:07:58,013 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4380 [2018-12-08 08:07:58,013 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:07:58,013 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:07:58,016 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:07:58,016 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:07:58,017 INFO L794 eck$LassoCheckResult]: Stem: 151419#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 151420#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 149859#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 149450#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 149451#L2767 assume 0 != main_~tmp~19; 151713#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 150174#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 148847#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 148786#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 149136#L515 assume 0 == initPersonOnFloor_~floor; 148840#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 147006#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 149759#L307 assume !(0 == callOnFloor_~floorID); 149525#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 149512#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 154751#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 154750#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 154748#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 154747#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 149731#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 147822#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 148606#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 147786#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 147624#L244 assume !(0 == isFloorCalling_~floorID); 147625#L248 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 152992#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 152993#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 149695#L1191-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 147781#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 151935#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 151936#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 153075#L1938 assume !(0 != timeShift_~tmp___9~2); 153076#L2029 assume !(1 == ~doorState~0); 155897#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 150237#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 150239#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 150175#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 146969#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 150655#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 148276#L1754 assume !(1 == ~currentHeading~0); 148277#L1764 assume !(0 == ~currentFloorID~0); 152367#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 152357#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 154626#L2935 assume !(-1 == ~expectedDirection~0); 154616#L2947 assume !(1 == ~expectedDirection~0); 154615#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 154614#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 154613#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 154612#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 154611#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 154608#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 154606#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 154604#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 154582#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 154579#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 147564#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 147565#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 153982#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 149651#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 147299#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 147300#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 151940#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 154561#L1938-1 assume !(0 != timeShift_~tmp___9~2); 154560#L2029-3 assume !(1 == ~doorState~0); 154559#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 154558#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 154523#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 154510#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 154508#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 154509#L1754-3 assume !(1 == ~currentHeading~0); 155829#L1764-9 assume !(0 == ~currentFloorID~0); 152335#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 152310#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 156001#L2935-1 assume !(-1 == ~expectedDirection~0); 155998#L2947-1 assume !(1 == ~expectedDirection~0); 155997#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 155996#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 155995#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 155993#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 155990#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 155987#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 155972#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 155964#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 155957#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 153355#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 153353#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 153349#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 153348#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 153346#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 153342#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 153340#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 153339#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 153337#L1938-2 assume !(0 != timeShift_~tmp___9~2); 153336#L2029-6 assume !(1 == ~doorState~0); 153334#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 153329#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 153276#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 153275#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 153274#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 148135#L1754-6 assume !(1 == ~currentHeading~0); 148137#L1764-18 assume !(0 == ~currentFloorID~0); 152327#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 152289#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 158152#L2935-2 assume !(-1 == ~expectedDirection~0); 158149#L2947-2 assume !(1 == ~expectedDirection~0); 158148#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 158146#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 158141#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 158140#L515-1 assume 0 == initPersonOnFloor_~floor; 158122#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 156918#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 156677#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 156486#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 156485#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 156484#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 156482#L2804-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 156483#L2805-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 149151#L1191-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 147647#L1212-33 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 147648#L2809-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 147944#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 154628#L244-63 assume !(0 == isFloorCalling_~floorID); 154629#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 154115#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 154116#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 154101#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 154097#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 154089#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 154091#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 154079#L1938-3 assume !(0 != timeShift_~tmp___9~2); 154081#L2029-9 assume !(1 == ~doorState~0); 164101#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 164099#L1378-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 164098#L818-15 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 150159#L1382-6 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 146927#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 151037#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 148168#L1754-9 assume !(1 == ~currentHeading~0); 148169#L1764-27 assume !(0 == ~currentFloorID~0); 152105#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 163885#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 163883#L2935-3 assume !(-1 == ~expectedDirection~0); 163880#L2947-3 assume !(1 == ~expectedDirection~0); 163878#L2948-3 cleanup_~i~3 := 0; 159801#L2576-2 [2018-12-08 08:07:58,017 INFO L796 eck$LassoCheckResult]: Loop: 159801#L2576-2 assume !false; 159800#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 159799#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 159798#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 159797#L2584 assume 1 != cleanup_~tmp___0~8; 159784#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 159782#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 159783#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 159746#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 159741#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 159740#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 159739#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 159738#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 159737#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 159735#L2804-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 159733#L2805-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 159734#L1191-44 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 162910#L1212-44 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 162893#L2809-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 156801#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 156799#L244-89 assume !(0 == isFloorCalling_~floorID); 156800#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 162863#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 156791#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 156792#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 162852#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 156781#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 156783#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 156777#L1938-4 assume !(0 != timeShift_~tmp___9~2); 156776#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 156612#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 156609#L1378-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 156611#L818-20 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 147849#L1382-8 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 147191#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 151051#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 148082#L1754-12 assume !(1 == ~currentHeading~0); 148084#L1764-36 assume !(0 == ~currentFloorID~0); 164919#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 164915#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 164913#L2935-4 assume !(-1 == ~expectedDirection~0); 164910#L2947-4 assume !(1 == ~expectedDirection~0); 163877#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 159801#L2576-2 [2018-12-08 08:07:58,020 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:07:58,020 INFO L82 PathProgramCache]: Analyzing trace with hash 1940711574, now seen corresponding path program 1 times [2018-12-08 08:07:58,091 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:07:58,091 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:07:58,092 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:58,092 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:07:58,092 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:58,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:07:58,140 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:07:58,140 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:07:58,141 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 08:07:58,141 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:07:58,141 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:07:58,141 INFO L82 PathProgramCache]: Analyzing trace with hash 65845131, now seen corresponding path program 1 times [2018-12-08 08:07:58,141 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:07:58,141 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:07:58,142 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:58,142 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:07:58,142 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:07:58,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:07:58,169 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:07:58,169 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:07:58,170 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-12-08 08:07:58,170 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:07:58,170 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-12-08 08:07:58,170 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-12-08 08:07:58,170 INFO L87 Difference]: Start difference. First operand 19455 states and 36473 transitions. cyclomatic complexity: 17019 Second operand 6 states. [2018-12-08 08:08:01,069 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:08:01,069 INFO L93 Difference]: Finished difference Result 38163 states and 71151 transitions. [2018-12-08 08:08:01,069 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-12-08 08:08:01,069 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38163 states and 71151 transitions. [2018-12-08 08:08:01,147 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9138 [2018-12-08 08:08:01,209 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38163 states to 38163 states and 71151 transitions. [2018-12-08 08:08:01,210 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38163 [2018-12-08 08:08:01,226 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38163 [2018-12-08 08:08:01,226 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38163 states and 71151 transitions. [2018-12-08 08:08:01,242 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:08:01,242 INFO L705 BuchiCegarLoop]: Abstraction has 38163 states and 71151 transitions. [2018-12-08 08:08:01,256 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38163 states and 71151 transitions. [2018-12-08 08:08:01,433 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38163 to 26535. [2018-12-08 08:08:01,434 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 26535 states. [2018-12-08 08:08:01,463 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26535 states to 26535 states and 49557 transitions. [2018-12-08 08:08:01,463 INFO L728 BuchiCegarLoop]: Abstraction has 26535 states and 49557 transitions. [2018-12-08 08:08:01,463 INFO L608 BuchiCegarLoop]: Abstraction has 26535 states and 49557 transitions. [2018-12-08 08:08:01,463 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-12-08 08:08:01,463 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26535 states and 49557 transitions. [2018-12-08 08:08:01,510 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6260 [2018-12-08 08:08:01,510 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:08:01,510 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:08:01,512 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:01,512 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:01,512 INFO L794 eck$LassoCheckResult]: Stem: 209168#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 209169#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 207582#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 207176#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 207177#L2767 assume 0 != main_~tmp~19; 209468#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 207903#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 206517#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 206451#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 206836#L515 assume 0 == initPersonOnFloor_~floor; 206507#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 204646#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 207486#L307 assume !(0 == callOnFloor_~floorID); 207250#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 207236#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 213863#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 213862#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 213860#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 213858#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 213859#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 205048#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 205049#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 213834#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 213833#L244 assume !(0 == isFloorCalling_~floorID); 213832#L248 assume !(1 == isFloorCalling_~floorID); 213829#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 213828#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 213827#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 213822#L1191-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 213818#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 213816#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 213815#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 213813#L1938 assume !(0 != timeShift_~tmp___9~2); 213812#L2029 assume !(1 == ~doorState~0); 213811#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 207971#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 207973#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 207904#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 204610#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 208411#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 205933#L1754 assume !(1 == ~currentHeading~0); 205934#L1764 assume !(0 == ~currentFloorID~0); 210083#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 210071#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 209724#L2935 assume !(-1 == ~expectedDirection~0); 207690#L2947 assume !(1 == ~expectedDirection~0); 207263#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 207766#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 205711#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 205712#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 206901#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 214749#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 214735#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 214727#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 214720#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 214717#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 214711#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 214706#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 214702#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 214704#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 214707#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 214705#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 214700#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 214701#L1938-1 assume !(0 != timeShift_~tmp___9~2); 216272#L2029-3 assume !(1 == ~doorState~0); 219878#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 219876#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 219874#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 219875#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 219935#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 219936#L1754-3 assume !(1 == ~currentHeading~0); 230676#L1764-9 assume !(0 == ~currentFloorID~0); 210048#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 210024#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 212871#L2935-1 assume !(-1 == ~expectedDirection~0); 212867#L2947-1 assume !(1 == ~expectedDirection~0); 212863#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 212859#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 212857#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 212854#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 212846#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 212842#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 212828#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 212820#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 212812#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 212809#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 212803#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 212798#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 212794#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 212796#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 212799#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 212797#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 212792#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 212793#L1938-2 assume !(0 != timeShift_~tmp___9~2); 214892#L2029-6 assume !(1 == ~doorState~0); 214882#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 214877#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 214858#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 214857#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 214855#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 214856#L1754-6 assume !(1 == ~currentHeading~0); 218811#L1764-18 assume !(0 == ~currentFloorID~0); 210040#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 210002#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 211213#L2935-2 assume !(-1 == ~expectedDirection~0); 211209#L2947-2 assume !(1 == ~expectedDirection~0); 211205#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 211200#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 211194#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 211187#L515-1 assume 0 == initPersonOnFloor_~floor; 211164#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 211116#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 211114#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 211104#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 211102#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 211100#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 211098#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 211072#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 211073#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 227116#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 227115#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 218884#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 204438#L244-63 assume !(0 == isFloorCalling_~floorID); 204439#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 206227#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 218817#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 207084#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 205220#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 205221#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 209422#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 209423#L1938-3 assume !(0 != timeShift_~tmp___9~2); 209792#L2029-9 assume !(1 == ~doorState~0); 209793#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 208130#L1378-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 208131#L818-15 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 222029#L1382-6 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 221874#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 210693#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 205824#L1754-9 assume !(1 == ~currentHeading~0); 205825#L1764-27 assume !(0 == ~currentFloorID~0); 209818#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 220304#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 220301#L2935-3 assume !(-1 == ~expectedDirection~0); 220295#L2947-3 assume !(1 == ~expectedDirection~0); 220290#L2948-3 cleanup_~i~3 := 0; 220288#L2576-2 [2018-12-08 08:08:01,512 INFO L796 eck$LassoCheckResult]: Loop: 220288#L2576-2 assume !false; 220287#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 220286#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 220285#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 220283#L2584 assume 1 != cleanup_~tmp___0~8; 220284#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 228417#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 228418#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 220242#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 220237#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 220235#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 220233#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 220231#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 220229#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 220226#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 220222#L2866-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 207036#L1191-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 205193#L1212-49 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 205194#L2870-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 208396#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 204794#L244-89 assume !(0 == isFloorCalling_~floorID); 204795#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 205965#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 208572#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 207020#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 205167#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 205168#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 209668#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 220037#L1938-4 assume !(0 != timeShift_~tmp___9~2); 220038#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 222239#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 222237#L1378-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 220119#L818-20 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 220055#L1382-8 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 206756#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 220043#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 220044#L1754-12 assume !(1 == ~currentHeading~0); 230613#L1764-36 assume !(0 == ~currentFloorID~0); 220309#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 220303#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 220298#L2935-4 assume !(-1 == ~expectedDirection~0); 220292#L2947-4 assume !(1 == ~expectedDirection~0); 220289#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 220288#L2576-2 [2018-12-08 08:08:01,517 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:01,517 INFO L82 PathProgramCache]: Analyzing trace with hash 1362113460, now seen corresponding path program 1 times [2018-12-08 08:08:01,517 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:01,517 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:01,518 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:01,518 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:08:01,518 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:01,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:01,547 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:01,548 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:01,548 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 08:08:01,548 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:08:01,548 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:01,548 INFO L82 PathProgramCache]: Analyzing trace with hash 1611421712, now seen corresponding path program 1 times [2018-12-08 08:08:01,548 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:01,548 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:01,549 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:01,549 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:08:01,549 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:01,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:01,562 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:01,562 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:01,562 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 08:08:01,562 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:08:01,562 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 08:08:01,562 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 08:08:01,563 INFO L87 Difference]: Start difference. First operand 26535 states and 49557 transitions. cyclomatic complexity: 23023 Second operand 5 states. [2018-12-08 08:08:05,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:08:05,737 INFO L93 Difference]: Finished difference Result 63127 states and 118305 transitions. [2018-12-08 08:08:05,737 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-12-08 08:08:05,738 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 63127 states and 118305 transitions. [2018-12-08 08:08:05,888 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16192 [2018-12-08 08:08:06,004 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 63127 states to 63127 states and 118305 transitions. [2018-12-08 08:08:06,005 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 63127 [2018-12-08 08:08:06,037 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 63127 [2018-12-08 08:08:06,037 INFO L73 IsDeterministic]: Start isDeterministic. Operand 63127 states and 118305 transitions. [2018-12-08 08:08:06,064 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:08:06,064 INFO L705 BuchiCegarLoop]: Abstraction has 63127 states and 118305 transitions. [2018-12-08 08:08:06,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63127 states and 118305 transitions. [2018-12-08 08:08:06,310 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63127 to 25963. [2018-12-08 08:08:06,310 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 25963 states. [2018-12-08 08:08:06,339 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25963 states to 25963 states and 48531 transitions. [2018-12-08 08:08:06,339 INFO L728 BuchiCegarLoop]: Abstraction has 25963 states and 48531 transitions. [2018-12-08 08:08:06,339 INFO L608 BuchiCegarLoop]: Abstraction has 25963 states and 48531 transitions. [2018-12-08 08:08:06,339 INFO L442 BuchiCegarLoop]: ======== Iteration 7============ [2018-12-08 08:08:06,339 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25963 states and 48531 transitions. [2018-12-08 08:08:06,384 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6117 [2018-12-08 08:08:06,384 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:08:06,384 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:08:06,386 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:06,386 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:06,387 INFO L794 eck$LassoCheckResult]: Stem: 298636#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 298637#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 297139#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 296723#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 296724#L2767 assume 0 != main_~tmp~19; 298929#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 297435#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 296171#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 296105#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 296429#L515 assume 0 == initPersonOnFloor_~floor; 296164#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 294328#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 297043#L307 assume !(0 == callOnFloor_~floorID); 296804#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 296792#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 297736#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 295435#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 295436#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 303513#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 297016#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 294720#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 294721#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 295087#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 294934#L244 assume !(0 == isFloorCalling_~floorID); 294303#L248 assume !(1 == isFloorCalling_~floorID); 294304#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 296074#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 298109#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 298111#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 297854#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 294665#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 294666#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 299138#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 300109#L1938 assume !(0 != timeShift_~tmp___9~2); 299460#L2029 assume !(1 == ~doorState~0); 299461#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 297498#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 297499#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 297436#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 294292#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 297908#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 300041#L1754 assume !(1 == ~currentHeading~0); 299545#L1764 assume !(0 == ~currentFloorID~0); 299546#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 303307#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 303305#L2935 assume !(-1 == ~expectedDirection~0); 303301#L2947 assume !(1 == ~expectedDirection~0); 303300#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 303299#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 303298#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 303296#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 303291#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 303288#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 303270#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 303261#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 303254#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 303251#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 303249#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 303248#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 303246#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 303247#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 303309#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 303245#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 303244#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 303240#L1938-1 assume !(0 != timeShift_~tmp___9~2); 303241#L2029-3 assume !(1 == ~doorState~0); 318677#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 297506#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 297507#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 318641#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 318639#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 318640#L1754-3 assume !(1 == ~currentHeading~0); 318917#L1764-9 assume !(0 == ~currentFloorID~0); 299531#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 301838#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 301828#L2935-1 assume !(-1 == ~expectedDirection~0); 301829#L2947-1 assume !(1 == ~expectedDirection~0); 301822#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 301823#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 301818#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 301819#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 305910#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 301817#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 301813#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 301810#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 301776#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 301772#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 301771#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 301612#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 301609#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 301610#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 301611#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 301608#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 301606#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 301605#L1938-2 assume !(0 != timeShift_~tmp___9~2); 299291#L2029-6 assume !(1 == ~doorState~0); 299292#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 297628#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 297629#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 318867#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 318865#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 318866#L1754-6 assume !(1 == ~currentHeading~0); 319789#L1764-18 assume !(0 == ~currentFloorID~0); 299488#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 300255#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 314024#L2935-2 assume !(-1 == ~expectedDirection~0); 300243#L2947-2 assume !(1 == ~expectedDirection~0); 300244#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 300234#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 300229#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 300227#L515-1 assume 0 == initPersonOnFloor_~floor; 300228#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 300190#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 300191#L307-2 assume !(0 == callOnFloor_~floorID); 313229#L310-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 300181#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 300182#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 300177#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 300178#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 316697#L2866-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 300176#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 300172#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 300169#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 300139#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 300133#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 300131#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 300130#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 300128#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 300125#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 300127#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 309855#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 309850#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 300111#L1938-3 assume !(0 != timeShift_~tmp___9~2); 299259#L2029-9 assume !(1 == ~doorState~0); 299260#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 297634#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 297635#L1547-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 309806#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 309804#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 309805#L1754-9 assume !(1 == ~currentHeading~0); 318922#L1764-27 assume !(0 == ~currentFloorID~0); 299286#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 299258#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 311613#L2935-3 assume !(-1 == ~expectedDirection~0); 311607#L2947-3 assume !(1 == ~expectedDirection~0); 311602#L2948-3 cleanup_~i~3 := 0; 311600#L2576-2 [2018-12-08 08:08:06,387 INFO L796 eck$LassoCheckResult]: Loop: 311600#L2576-2 assume !false; 311599#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 311598#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 311597#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 311596#L2584 assume 1 != cleanup_~tmp___0~8; 311595#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 311593#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 311591#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 311592#L1282 assume !(0 != anyStopRequested_~tmp___3~0); 316775#L1286 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 316755#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 316753#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 316751#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 316749#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 316747#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 316744#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 316745#L2866-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 316150#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 316143#L2887-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 316140#L2898-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 316109#L2909-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 316106#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 316105#L244-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 316104#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 316103#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 316102#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 316096#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 316094#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 316093#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 316086#L1938-4 assume !(0 != timeShift_~tmp___9~2); 299269#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 299270#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 297641#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 297642#L1547-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 318759#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 318756#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 318757#L1754-12 assume !(1 == ~currentHeading~0); 318921#L1764-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 299250#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 299245#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 311610#L2935-4 assume !(-1 == ~expectedDirection~0); 311604#L2947-4 assume !(1 == ~expectedDirection~0); 311601#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 311600#L2576-2 [2018-12-08 08:08:06,388 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:06,388 INFO L82 PathProgramCache]: Analyzing trace with hash -350699030, now seen corresponding path program 1 times [2018-12-08 08:08:06,388 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:06,391 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:06,391 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:06,391 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:08:06,391 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:06,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:06,436 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:06,436 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:06,436 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 08:08:06,436 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:08:06,436 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:06,436 INFO L82 PathProgramCache]: Analyzing trace with hash -2146990963, now seen corresponding path program 1 times [2018-12-08 08:08:06,436 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:06,436 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:06,437 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:06,437 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:08:06,437 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:06,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:06,453 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:06,453 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:06,453 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 08:08:06,453 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:08:06,453 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 08:08:06,453 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 08:08:06,453 INFO L87 Difference]: Start difference. First operand 25963 states and 48531 transitions. cyclomatic complexity: 22569 Second operand 5 states. [2018-12-08 08:08:08,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:08:08,113 INFO L93 Difference]: Finished difference Result 126963 states and 239536 transitions. [2018-12-08 08:08:08,113 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-12-08 08:08:08,114 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 126963 states and 239536 transitions. [2018-12-08 08:08:08,436 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 32106 [2018-12-08 08:08:08,685 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 126963 states to 126963 states and 239536 transitions. [2018-12-08 08:08:08,685 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 126963 [2018-12-08 08:08:08,756 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 126963 [2018-12-08 08:08:08,756 INFO L73 IsDeterministic]: Start isDeterministic. Operand 126963 states and 239536 transitions. [2018-12-08 08:08:08,814 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:08:08,814 INFO L705 BuchiCegarLoop]: Abstraction has 126963 states and 239536 transitions. [2018-12-08 08:08:08,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126963 states and 239536 transitions. [2018-12-08 08:08:09,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126963 to 50691. [2018-12-08 08:08:09,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 50691 states. [2018-12-08 08:08:09,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50691 states to 50691 states and 94803 transitions. [2018-12-08 08:08:09,350 INFO L728 BuchiCegarLoop]: Abstraction has 50691 states and 94803 transitions. [2018-12-08 08:08:09,350 INFO L608 BuchiCegarLoop]: Abstraction has 50691 states and 94803 transitions. [2018-12-08 08:08:09,350 INFO L442 BuchiCegarLoop]: ======== Iteration 8============ [2018-12-08 08:08:09,350 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50691 states and 94803 transitions. [2018-12-08 08:08:09,441 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11980 [2018-12-08 08:08:09,441 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:08:09,441 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:08:09,443 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:09,443 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:09,443 INFO L794 eck$LassoCheckResult]: Stem: 451718#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 451719#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 450145#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 449731#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 449732#L2767 assume 0 != main_~tmp~19; 452011#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 450467#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 449140#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 449075#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 449406#L515 assume 0 == initPersonOnFloor_~floor; 449132#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 447277#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 450050#L307 assume !(0 == callOnFloor_~floorID); 449806#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 449791#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 450785#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 448402#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 448403#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 449430#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 449431#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 448082#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 448894#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 448045#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 447890#L244 assume !(0 == isFloorCalling_~floorID); 447247#L248 assume !(1 == isFloorCalling_~floorID); 447248#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 449044#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 451176#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 449983#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 449984#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 447617#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 447618#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 452220#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 453314#L1938 assume !(0 != timeShift_~tmp___9~2); 452552#L2029 assume !(1 == ~doorState~0); 452553#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 450537#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 450538#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 450468#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 450469#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 454914#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 454915#L1754 assume !(1 == ~currentHeading~0); 455196#L1764 assume !(0 == ~currentFloorID~0); 455192#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 455191#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 455189#L2935 assume !(-1 == ~expectedDirection~0); 455185#L2947 assume !(1 == ~expectedDirection~0); 455184#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 455183#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 455182#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 455178#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 455169#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 455167#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 455152#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 455143#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 455135#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 455132#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 455130#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 455129#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 455128#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 455126#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 455122#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 455120#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 455118#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 455115#L1938-1 assume !(0 != timeShift_~tmp___9~2); 455032#L2029-3 assume !(1 == ~doorState~0); 455033#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 454981#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 454982#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 455020#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 455030#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 448486#L1754-3 assume !(1 == ~currentHeading~0); 448487#L1764-9 assume !(0 == ~currentFloorID~0); 452625#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 461465#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 462859#L2935-1 assume !(-1 == ~expectedDirection~0); 462856#L2947-1 assume !(1 == ~expectedDirection~0); 462855#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 462854#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 462853#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 462851#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 462850#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 454102#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 454099#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 454096#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 454059#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 454007#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 454004#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 454001#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 453997#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 453993#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 453994#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 455508#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 455507#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 455506#L1938-2 assume !(0 != timeShift_~tmp___9~2); 455505#L2029-6 assume !(1 == ~doorState~0); 455504#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 455503#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 453917#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 453918#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 453908#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 453910#L1754-6 assume !(1 == ~currentHeading~0); 455639#L1764-18 assume !(0 == ~currentFloorID~0); 462533#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 462531#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 462528#L2935-2 assume !(-1 == ~expectedDirection~0); 462525#L2947-2 assume !(1 == ~expectedDirection~0); 462524#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 462522#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 462517#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 462516#L515-1 assume 0 == initPersonOnFloor_~floor; 462499#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 462482#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 462480#L307-2 assume !(0 == callOnFloor_~floorID); 462477#L310-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 462475#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 462474#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 462473#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 462471#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 462470#L2866-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 453827#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 453825#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 453819#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 453786#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 453779#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 453776#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 453771#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 453765#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 453762#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 453764#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 456045#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 456044#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 456042#L1938-3 assume !(0 != timeShift_~tmp___9~2); 456041#L2029-9 assume !(1 == ~doorState~0); 456040#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 453700#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 453701#L1547-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 453645#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 453646#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 453822#L1754-9 assume !(1 == ~currentHeading~0); 453823#L1764-27 assume !(0 == ~currentFloorID~0); 462177#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 462172#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 481600#L2935-3 assume !(-1 == ~expectedDirection~0); 481593#L2947-3 assume !(1 == ~expectedDirection~0); 481587#L2948-3 cleanup_~i~3 := 0; 481584#L2576-2 [2018-12-08 08:08:09,443 INFO L796 eck$LassoCheckResult]: Loop: 481584#L2576-2 assume !false; 481578#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 481575#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 481573#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 481569#L2584 assume 1 != cleanup_~tmp___0~8; 481566#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 481553#L244-84 assume !(0 == isFloorCalling_~floorID); 481554#L248-84 assume !(1 == isFloorCalling_~floorID); 492364#L252-84 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 492357#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 492348#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 492343#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 492342#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 492341#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 492340#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 492339#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 492337#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 492336#L2866-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 453562#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 453561#L2887-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 453560#L2898-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 453529#L2909-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 453525#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 453522#L244-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 453520#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 453516#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 453515#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 453509#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 453506#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 453503#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 453496#L1938-4 assume !(0 != timeShift_~tmp___9~2); 453467#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 453465#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 453466#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 453402#L1547-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 453398#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 453388#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 453389#L1754-12 assume !(1 == ~currentHeading~0); 461694#L1764-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 461695#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 481603#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 481597#L2935-4 assume !(-1 == ~expectedDirection~0); 481590#L2947-4 assume !(1 == ~expectedDirection~0); 481586#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 481584#L2576-2 [2018-12-08 08:08:09,445 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:09,445 INFO L82 PathProgramCache]: Analyzing trace with hash -350699030, now seen corresponding path program 2 times [2018-12-08 08:08:09,445 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:09,448 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:09,448 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:09,448 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:08:09,448 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:09,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:09,488 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:09,488 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:09,488 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 08:08:09,488 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:08:09,488 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:09,488 INFO L82 PathProgramCache]: Analyzing trace with hash -2065398881, now seen corresponding path program 1 times [2018-12-08 08:08:09,488 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:09,489 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:09,489 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:09,489 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-08 08:08:09,489 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:09,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:09,496 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:09,496 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:09,496 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 08:08:09,497 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:08:09,497 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-08 08:08:09,497 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-08 08:08:09,497 INFO L87 Difference]: Start difference. First operand 50691 states and 94803 transitions. cyclomatic complexity: 44113 Second operand 3 states. [2018-12-08 08:08:10,282 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:08:10,282 INFO L93 Difference]: Finished difference Result 55243 states and 103047 transitions. [2018-12-08 08:08:10,283 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-08 08:08:10,283 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55243 states and 103047 transitions. [2018-12-08 08:08:10,411 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12354 [2018-12-08 08:08:10,505 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55243 states to 55243 states and 103047 transitions. [2018-12-08 08:08:10,505 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55243 [2018-12-08 08:08:10,531 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55243 [2018-12-08 08:08:10,531 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55243 states and 103047 transitions. [2018-12-08 08:08:10,554 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:08:10,554 INFO L705 BuchiCegarLoop]: Abstraction has 55243 states and 103047 transitions. [2018-12-08 08:08:10,574 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55243 states and 103047 transitions. [2018-12-08 08:08:10,830 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55243 to 50155. [2018-12-08 08:08:10,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 50155 states. [2018-12-08 08:08:10,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50155 states to 50155 states and 93795 transitions. [2018-12-08 08:08:10,887 INFO L728 BuchiCegarLoop]: Abstraction has 50155 states and 93795 transitions. [2018-12-08 08:08:10,887 INFO L608 BuchiCegarLoop]: Abstraction has 50155 states and 93795 transitions. [2018-12-08 08:08:10,887 INFO L442 BuchiCegarLoop]: ======== Iteration 9============ [2018-12-08 08:08:10,887 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50155 states and 93795 transitions. [2018-12-08 08:08:10,976 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11684 [2018-12-08 08:08:10,976 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:08:10,976 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:08:10,978 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:10,978 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:10,978 INFO L794 eck$LassoCheckResult]: Stem: 557436#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 557437#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 555940#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 555527#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 555528#L2767 assume 0 != main_~tmp~19; 557736#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 556236#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 554986#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 554927#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 555227#L515 assume 0 == initPersonOnFloor_~floor; 554977#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 553205#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 555847#L307 assume !(0 == callOnFloor_~floorID); 555601#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 555587#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 556541#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 554297#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 554298#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 555247#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 555248#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 553598#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 553599#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 553951#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 553800#L244 assume !(0 == isFloorCalling_~floorID); 553180#L248 assume !(1 == isFloorCalling_~floorID); 553181#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 554899#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 556900#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 555781#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 555782#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 553539#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 553540#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 557700#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 557701#L1938 assume !(0 != timeShift_~tmp___9~2); 558256#L2029 assume !(1 == ~doorState~0); 558257#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 556303#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 556304#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 556237#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 553169#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 556700#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 554445#L1754 assume !(1 == ~currentHeading~0); 554446#L1764 assume !(0 == ~currentFloorID~0); 558333#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 558323#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 557989#L2935 assume !(-1 == ~expectedDirection~0); 556029#L2947 assume !(1 == ~expectedDirection~0); 555617#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 556108#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 554230#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 554231#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 555265#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 555443#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 553764#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 553766#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 554937#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 557133#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 583457#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 583456#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 583455#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 583452#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 583446#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 583444#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 583442#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 583440#L1938-1 assume !(0 != timeShift_~tmp___9~2); 583437#L2029-3 assume !(1 == ~doorState~0); 583436#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 583433#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 583431#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 583412#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 583396#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 583357#L1754-3 assume !(1 == ~currentHeading~0); 583348#L1764-9 assume !(0 == ~currentFloorID~0); 583342#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 583340#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 583337#L2935-1 assume !(-1 == ~expectedDirection~0); 583334#L2947-1 assume !(1 == ~expectedDirection~0); 583332#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 583330#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 583329#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 583327#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 583328#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 594205#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 588188#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 588189#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 583285#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 583281#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 583271#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 583269#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 583267#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 583259#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 583254#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 583248#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 583246#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 583241#L1938-2 assume !(0 != timeShift_~tmp___9~2); 583242#L2029-6 assume !(1 == ~doorState~0); 583237#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 583238#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 588708#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 583184#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 583113#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 583072#L1754-6 assume !(1 == ~currentHeading~0); 583063#L1764-18 assume !(0 == ~currentFloorID~0); 583057#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 583055#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 583052#L2935-2 assume !(-1 == ~expectedDirection~0); 583049#L2947-2 assume !(1 == ~expectedDirection~0); 583048#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 583046#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 583041#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 583040#L515-1 assume 0 == initPersonOnFloor_~floor; 583022#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 582974#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 582967#L307-2 assume !(0 == callOnFloor_~floorID); 555817#L310-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 555591#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 556550#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 582735#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 582734#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 576280#L2866-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 559878#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 559876#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 559870#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 559865#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 559859#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 559857#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 559856#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 559854#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 559850#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 559841#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 559837#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 559832#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 559797#L1938-3 assume !(0 != timeShift_~tmp___9~2); 559796#L2029-9 assume !(1 == ~doorState~0); 559794#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 559725#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 559633#L1547-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 559623#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 559606#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 559605#L1754-9 assume !(1 == ~currentHeading~0); 559592#L1764-27 assume !(0 == ~currentFloorID~0); 559588#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 559583#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 559579#L2935-3 assume !(-1 == ~expectedDirection~0); 559575#L2947-3 assume !(1 == ~expectedDirection~0); 559535#L2948-3 cleanup_~i~3 := 0; 559533#L2576-2 [2018-12-08 08:08:10,979 INFO L796 eck$LassoCheckResult]: Loop: 559533#L2576-2 assume !false; 559532#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 559531#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 559530#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 559527#L2584 assume 1 != cleanup_~tmp___0~8; 559525#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 559524#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 559523#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 559521#L1282 assume !(0 != anyStopRequested_~tmp___3~0); 559519#L1286 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 559517#L244-85 assume !(0 == isFloorCalling_~floorID); 559504#L248-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 559491#L271-85 anyStopRequested_#t~ret8 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret8;havoc anyStopRequested_#t~ret8; 559479#L1293 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 559460#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 559397#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 559398#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 559381#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 559382#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 559325#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 559326#L2866-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 559199#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 559184#L2887-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 559175#L2898-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 559167#L2909-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 559164#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 559162#L244-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 559161#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 559160#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 559159#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 559154#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 559152#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 559151#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 559149#L1938-4 assume !(0 != timeShift_~tmp___9~2); 559148#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 559147#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 559144#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 559145#L1547-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 558973#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 558967#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 558958#L1754-12 assume !(1 == ~currentHeading~0); 558949#L1764-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 558940#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 558935#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 559601#L2935-4 assume !(-1 == ~expectedDirection~0); 559537#L2947-4 assume !(1 == ~expectedDirection~0); 559534#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 559533#L2576-2 [2018-12-08 08:08:10,985 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:10,985 INFO L82 PathProgramCache]: Analyzing trace with hash -350699030, now seen corresponding path program 3 times [2018-12-08 08:08:10,985 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:10,985 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:10,985 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:10,986 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:08:10,986 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:10,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:11,014 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:11,015 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:11,015 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 08:08:11,015 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:08:11,015 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:11,015 INFO L82 PathProgramCache]: Analyzing trace with hash -790064123, now seen corresponding path program 1 times [2018-12-08 08:08:11,015 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:11,015 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:11,016 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:11,016 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-08 08:08:11,016 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:11,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:11,026 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:11,026 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:11,027 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 08:08:11,027 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:08:11,027 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-12-08 08:08:11,027 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-12-08 08:08:11,027 INFO L87 Difference]: Start difference. First operand 50155 states and 93795 transitions. cyclomatic complexity: 43641 Second operand 4 states. [2018-12-08 08:08:11,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:08:11,473 INFO L93 Difference]: Finished difference Result 92453 states and 173303 transitions. [2018-12-08 08:08:11,473 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-12-08 08:08:11,473 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 92453 states and 173303 transitions. [2018-12-08 08:08:11,698 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22314 [2018-12-08 08:08:11,869 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 92453 states to 92453 states and 173303 transitions. [2018-12-08 08:08:11,869 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 92453 [2018-12-08 08:08:11,921 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 92453 [2018-12-08 08:08:11,921 INFO L73 IsDeterministic]: Start isDeterministic. Operand 92453 states and 173303 transitions. [2018-12-08 08:08:11,970 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:08:11,970 INFO L705 BuchiCegarLoop]: Abstraction has 92453 states and 173303 transitions. [2018-12-08 08:08:12,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92453 states and 173303 transitions. [2018-12-08 08:08:12,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92453 to 50207. [2018-12-08 08:08:12,388 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 50207 states. [2018-12-08 08:08:12,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50207 states to 50207 states and 93847 transitions. [2018-12-08 08:08:12,680 INFO L728 BuchiCegarLoop]: Abstraction has 50207 states and 93847 transitions. [2018-12-08 08:08:12,680 INFO L608 BuchiCegarLoop]: Abstraction has 50207 states and 93847 transitions. [2018-12-08 08:08:12,680 INFO L442 BuchiCegarLoop]: ======== Iteration 10============ [2018-12-08 08:08:12,680 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50207 states and 93847 transitions. [2018-12-08 08:08:12,758 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11696 [2018-12-08 08:08:12,758 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:08:12,758 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:08:12,759 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:12,759 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:12,760 INFO L794 eck$LassoCheckResult]: Stem: 700320#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 700321#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 698681#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 698255#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 698256#L2767 assume 0 != main_~tmp~19; 700618#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 699016#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 697639#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 697580#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 697943#L515 assume 0 == initPersonOnFloor_~floor; 697631#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 695830#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 698585#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 698586#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 699353#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 696941#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 696942#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 697962#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 697964#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 696232#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 696233#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 700973#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 700974#L244 assume !(0 == isFloorCalling_~floorID); 695805#L248 assume !(1 == isFloorCalling_~floorID); 695806#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 701931#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 701932#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 698517#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 698518#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 702827#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 702826#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 702825#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 702824#L1938 assume !(0 != timeShift_~tmp___9~2); 702823#L2029 assume !(1 == ~doorState~0); 702822#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 702821#L1378 assume !(1 == stopRequestedInDirection_~dir); 702820#L1547 assume !(0 == ~currentFloorID~0); 702819#L1553 assume !(~currentFloorID~0 > 0); 699035#L1568 assume ~currentFloorID~0 > 0; 702844#L1570 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 702843#L1571 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 699530#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 699531#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 697088#L1754 assume !(1 == ~currentHeading~0); 697089#L1764 assume !(0 == ~currentFloorID~0); 701252#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 701238#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 705886#L2935 assume !(-1 == ~expectedDirection~0); 705879#L2947 assume !(1 == ~expectedDirection~0); 705046#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 705045#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 705044#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 705043#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 705042#L2866-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 698495#L1191-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 696154#L1212-16 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 696155#L2870-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 699525#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 696386#L244-21 assume !(0 == isFloorCalling_~floorID); 696387#L248-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 697071#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 699751#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 698469#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 698470#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 696130#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 696131#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 700836#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 703205#L1938-1 assume !(0 != timeShift_~tmp___9~2); 703202#L2029-3 assume !(1 == ~doorState~0); 703203#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 709326#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 709296#L1547-2 assume !(0 == ~currentFloorID~0); 702313#L1553-2 assume !(~currentFloorID~0 > 0); 696036#L1568-2 assume ~currentFloorID~0 > 0; 696038#L1570-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 697982#L1571-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 695814#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 703562#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 697020#L1754-3 assume !(1 == ~currentHeading~0); 697021#L1764-9 assume !(0 == ~currentFloorID~0); 701215#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 701190#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 722001#L2935-1 assume !(-1 == ~expectedDirection~0); 721949#L2947-1 assume !(1 == ~expectedDirection~0); 721891#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 721889#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 721887#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 721885#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 721880#L2866-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 721878#L1191-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 721874#L1212-27 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 721563#L2870-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 721561#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 721559#L244-42 assume !(0 == isFloorCalling_~floorID); 721555#L248-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 721557#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 727775#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 727774#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 727773#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 727769#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 727767#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 727766#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 727765#L1938-2 assume !(0 != timeShift_~tmp___9~2); 702485#L2029-6 assume !(1 == ~doorState~0); 702395#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 702396#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 709793#L1547-4 assume !(0 == ~currentFloorID~0); 702367#L1553-4 assume !(~currentFloorID~0 > 0); 702365#L1568-4 assume ~currentFloorID~0 > 0; 709776#L1570-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 697986#L1571-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 695736#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 710215#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 728548#L1754-6 assume !(1 == ~currentHeading~0); 701193#L1764-18 assume !(0 == ~currentFloorID~0); 701194#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 745478#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 745475#L2935-2 assume !(-1 == ~expectedDirection~0); 745472#L2947-2 assume !(1 == ~expectedDirection~0); 745471#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 745466#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 745461#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 745460#L515-1 assume 0 == initPersonOnFloor_~floor; 732664#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 732649#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 732650#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 736873#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 736872#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 736871#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 736870#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 736865#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 736862#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 736857#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 736844#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 736840#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 736839#L244-63 assume !(0 == isFloorCalling_~floorID); 736831#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 736829#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 736311#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 736312#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 736836#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 736834#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 736313#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 736314#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 736298#L1938-3 assume !(0 != timeShift_~tmp___9~2); 709521#L2029-9 assume !(1 == ~doorState~0); 702479#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 702478#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 702475#L1547-6 assume !(0 == ~currentFloorID~0); 699155#L1553-6 assume !(~currentFloorID~0 > 0); 696087#L1568-6 assume ~currentFloorID~0 > 0; 696089#L1570-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 697863#L1571-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 702467#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 707201#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 696980#L1754-9 assume !(1 == ~currentHeading~0); 696981#L1764-27 assume !(0 == ~currentFloorID~0); 700983#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 700949#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 745469#L2935-3 assume !(-1 == ~expectedDirection~0); 733698#L2947-3 assume !(1 == ~expectedDirection~0); 733489#L2948-3 cleanup_~i~3 := 0; 733486#L2576-2 [2018-12-08 08:08:12,760 INFO L796 eck$LassoCheckResult]: Loop: 733486#L2576-2 assume !false; 733484#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 733482#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 733479#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 733477#L2584 assume 1 != cleanup_~tmp___0~8; 733476#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 733475#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 733474#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 733445#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 733444#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 733443#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 733442#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 733441#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 733440#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 733439#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 723348#L2866-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 723349#L1191-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 743824#L1212-49 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 733699#L2870-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 701249#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 737612#L244-89 assume !(0 == isFloorCalling_~floorID); 737595#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 737593#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 735324#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 735325#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 744917#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 744915#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 700822#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 700824#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 702487#L1938-4 assume !(0 != timeShift_~tmp___9~2); 702488#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 702405#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 702402#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 702388#L1547-8 assume !(0 == ~currentFloorID~0); 702389#L1553-8 assume !(~currentFloorID~0 > 0); 702382#L1568-8 assume ~currentFloorID~0 > 0; 733516#L1570-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 697976#L1571-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 697977#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 724934#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 724935#L1754-12 assume !(1 == ~currentHeading~0); 724924#L1764-36 assume !(0 == ~currentFloorID~0); 724925#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 733497#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 733495#L2935-4 assume !(-1 == ~expectedDirection~0); 733492#L2947-4 assume !(1 == ~expectedDirection~0); 733488#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 733486#L2576-2 [2018-12-08 08:08:12,767 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:12,767 INFO L82 PathProgramCache]: Analyzing trace with hash -540053120, now seen corresponding path program 1 times [2018-12-08 08:08:12,767 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:12,767 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:12,768 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:12,768 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:08:12,768 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:12,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:12,809 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:12,809 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:12,810 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 08:08:12,810 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:08:12,810 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:12,810 INFO L82 PathProgramCache]: Analyzing trace with hash 22950895, now seen corresponding path program 1 times [2018-12-08 08:08:12,810 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:12,810 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:12,810 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:12,811 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:08:12,811 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:12,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:12,834 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:12,835 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:12,835 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 08:08:12,835 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:08:12,835 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 08:08:12,835 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 08:08:12,835 INFO L87 Difference]: Start difference. First operand 50207 states and 93847 transitions. cyclomatic complexity: 43641 Second operand 5 states. [2018-12-08 08:08:14,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:08:14,035 INFO L93 Difference]: Finished difference Result 66091 states and 123077 transitions. [2018-12-08 08:08:14,035 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-08 08:08:14,035 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66091 states and 123077 transitions. [2018-12-08 08:08:14,200 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15724 [2018-12-08 08:08:14,323 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66091 states to 66091 states and 123077 transitions. [2018-12-08 08:08:14,323 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 66091 [2018-12-08 08:08:14,360 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 66091 [2018-12-08 08:08:14,361 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66091 states and 123077 transitions. [2018-12-08 08:08:14,392 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:08:14,392 INFO L705 BuchiCegarLoop]: Abstraction has 66091 states and 123077 transitions. [2018-12-08 08:08:14,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66091 states and 123077 transitions. [2018-12-08 08:08:14,757 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66091 to 65613. [2018-12-08 08:08:14,757 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 65613 states. [2018-12-08 08:08:14,826 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65613 states to 65613 states and 122347 transitions. [2018-12-08 08:08:14,827 INFO L728 BuchiCegarLoop]: Abstraction has 65613 states and 122347 transitions. [2018-12-08 08:08:14,827 INFO L608 BuchiCegarLoop]: Abstraction has 65613 states and 122347 transitions. [2018-12-08 08:08:14,827 INFO L442 BuchiCegarLoop]: ======== Iteration 11============ [2018-12-08 08:08:14,827 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65613 states and 122347 transitions. [2018-12-08 08:08:14,943 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15586 [2018-12-08 08:08:14,943 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:08:14,944 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:08:14,948 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:14,948 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:14,949 INFO L794 eck$LassoCheckResult]: Stem: 816464#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 816465#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 814886#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 814461#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 814462#L2767 assume 0 != main_~tmp~19; 816767#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 815208#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 813904#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 813846#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 814175#L515 assume 0 == initPersonOnFloor_~floor; 813897#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 812132#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 814792#L307 assume !(0 == callOnFloor_~floorID); 814539#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 814520#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 815537#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 813228#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 813229#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 814206#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 814370#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 812488#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 812489#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 812886#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 812721#L244 assume !(0 == isFloorCalling_~floorID); 812110#L248 assume !(1 == isFloorCalling_~floorID); 812111#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 813818#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 817993#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 819923#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 819922#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 819918#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 819916#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 819915#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 819913#L1938 assume !(0 != timeShift_~tmp___9~2); 819912#L2029 assume !(1 == ~doorState~0); 819911#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 819909#L1378 assume !(1 == stopRequestedInDirection_~dir); 819908#L1547 assume !(0 == ~currentFloorID~0); 819907#L1553 assume ~currentFloorID~0 > 0; 819905#L1554 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 819906#L244-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 820670#L271-6 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 819874#L1558 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 819866#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 819864#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 819862#L1754 assume !(1 == ~currentHeading~0); 819860#L1764 assume !(0 == ~currentFloorID~0); 819815#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 819113#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 818892#L2935 assume !(-1 == ~expectedDirection~0); 818887#L2947 assume !(1 == ~expectedDirection~0); 818886#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 818885#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 818883#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 818878#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 818879#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 819544#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 819542#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 819060#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 818845#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 818842#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 818696#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 818694#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 818693#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 818689#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 818685#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 818682#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 818681#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 818677#L1938-1 assume !(0 != timeShift_~tmp___9~2); 818676#L2029-3 assume !(1 == ~doorState~0); 818675#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 818673#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 818674#L1547-2 assume !(0 == ~currentFloorID~0); 818644#L1553-2 assume ~currentFloorID~0 > 0; 818645#L1554-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 818725#L244-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 818721#L271-27 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 818409#L1558-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 818387#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 818383#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 818380#L1754-3 assume !(1 == ~currentHeading~0); 818315#L1764-9 assume !(0 == ~currentFloorID~0); 818303#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 818295#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 818290#L2935-1 assume !(-1 == ~expectedDirection~0); 818285#L2947-1 assume !(1 == ~expectedDirection~0); 818282#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 818278#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 818274#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 818275#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 833457#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 818256#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 818239#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 818230#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 818222#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 818219#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 818217#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 818216#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 818215#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 818213#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 818209#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 818207#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 818206#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 818204#L1938-2 assume !(0 != timeShift_~tmp___9~2); 818203#L2029-6 assume !(1 == ~doorState~0); 818202#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 818200#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 818175#L1547-4 assume !(0 == ~currentFloorID~0); 818176#L1553-4 assume ~currentFloorID~0 > 0; 815280#L1554-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 815281#L244-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 818014#L271-48 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 815203#L1558-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 815204#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 836795#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 836833#L1754-6 assume !(1 == ~currentHeading~0); 836815#L1764-18 assume !(0 == ~currentFloorID~0); 836805#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 836801#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 856311#L2935-2 assume !(-1 == ~expectedDirection~0); 856308#L2947-2 assume !(1 == ~expectedDirection~0); 856307#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 856305#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 856300#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 856299#L515-1 assume 0 == initPersonOnFloor_~floor; 833384#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 833366#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 833360#L307-2 assume !(0 == callOnFloor_~floorID); 833361#L310-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 868485#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 868484#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 868483#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 868481#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 868476#L2866-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 831782#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 831781#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 831776#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 831772#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 831766#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 831765#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 831764#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 831762#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 829022#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 829024#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 840083#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 840081#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 840078#L1938-3 assume !(0 != timeShift_~tmp___9~2); 840075#L2029-9 assume !(1 == ~doorState~0); 840073#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 840070#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 840071#L1547-6 assume !(0 == ~currentFloorID~0); 862382#L1553-6 assume !(~currentFloorID~0 > 0); 872758#L1568-6 assume ~currentFloorID~0 > 0; 812380#L1570-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 814110#L1571-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 814194#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 877229#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 813267#L1754-9 assume !(1 == ~currentHeading~0); 813268#L1764-27 assume !(0 == ~currentFloorID~0); 817131#L1764-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 840370#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 857821#L2935-3 assume !(-1 == ~expectedDirection~0); 857818#L2947-3 assume !(1 == ~expectedDirection~0); 857813#L2948-3 cleanup_~i~3 := 0; 857808#L2576-2 [2018-12-08 08:08:14,949 INFO L796 eck$LassoCheckResult]: Loop: 857808#L2576-2 assume !false; 857805#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 857803#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 857801#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 857799#L2584 assume 1 != cleanup_~tmp___0~8; 857797#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 857796#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 857795#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 857792#L1282 assume !(0 != anyStopRequested_~tmp___3~0); 857790#L1286 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 857787#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 857784#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 857782#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 857780#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 857778#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 857775#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 857776#L2866-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 839958#L1191-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 862571#L1212-49 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 857733#L2870-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 857732#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 857730#L244-89 assume !(0 == isFloorCalling_~floorID); 857724#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 857725#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 861290#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 861289#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 861286#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 861284#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 861282#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 861281#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 861274#L1938-4 assume !(0 != timeShift_~tmp___9~2); 852204#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 849609#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 849608#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 849607#L1547-8 assume !(0 == ~currentFloorID~0); 849606#L1553-8 assume ~currentFloorID~0 > 0; 842352#L1554-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 842350#L244-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 840853#L271-95 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 840399#L1558-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 840382#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 872669#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 872668#L1754-12 assume !(1 == ~currentHeading~0); 872665#L1764-36 assume !(0 == ~currentFloorID~0); 840142#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 840136#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 857827#L2935-4 assume !(-1 == ~expectedDirection~0); 857824#L2947-4 assume !(1 == ~expectedDirection~0); 857812#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 857808#L2576-2 [2018-12-08 08:08:14,956 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:14,956 INFO L82 PathProgramCache]: Analyzing trace with hash 1599383040, now seen corresponding path program 1 times [2018-12-08 08:08:14,956 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:14,956 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:14,957 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:14,957 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:08:14,957 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:14,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:14,997 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:14,997 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:14,997 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 08:08:14,997 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:08:14,998 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:14,998 INFO L82 PathProgramCache]: Analyzing trace with hash 1206194521, now seen corresponding path program 1 times [2018-12-08 08:08:14,998 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:14,998 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:14,998 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:14,998 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:08:14,998 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:15,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:15,040 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:15,040 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:15,040 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-08 08:08:15,040 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:08:15,040 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-12-08 08:08:15,040 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-12-08 08:08:15,040 INFO L87 Difference]: Start difference. First operand 65613 states and 122347 transitions. cyclomatic complexity: 56735 Second operand 7 states. [2018-12-08 08:08:19,065 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:08:19,065 INFO L93 Difference]: Finished difference Result 241985 states and 453139 transitions. [2018-12-08 08:08:19,065 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-12-08 08:08:19,065 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 241985 states and 453139 transitions. [2018-12-08 08:08:19,693 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 51494 [2018-12-08 08:08:20,192 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 241985 states to 241985 states and 453139 transitions. [2018-12-08 08:08:20,192 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 241985 [2018-12-08 08:08:20,325 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 241985 [2018-12-08 08:08:20,325 INFO L73 IsDeterministic]: Start isDeterministic. Operand 241985 states and 453139 transitions. [2018-12-08 08:08:20,427 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:08:20,427 INFO L705 BuchiCegarLoop]: Abstraction has 241985 states and 453139 transitions. [2018-12-08 08:08:20,527 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 241985 states and 453139 transitions. [2018-12-08 08:08:23,589 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 241985 to 65613. [2018-12-08 08:08:23,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 65613 states. [2018-12-08 08:08:23,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65613 states to 65613 states and 122318 transitions. [2018-12-08 08:08:23,658 INFO L728 BuchiCegarLoop]: Abstraction has 65613 states and 122318 transitions. [2018-12-08 08:08:23,658 INFO L608 BuchiCegarLoop]: Abstraction has 65613 states and 122318 transitions. [2018-12-08 08:08:23,658 INFO L442 BuchiCegarLoop]: ======== Iteration 12============ [2018-12-08 08:08:23,658 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65613 states and 122318 transitions. [2018-12-08 08:08:23,773 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 15586 [2018-12-08 08:08:23,773 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:08:23,773 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:08:23,775 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:23,775 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:23,776 INFO L794 eck$LassoCheckResult]: Stem: 1124312#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 1124313#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 1122676#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 1122248#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 1122249#L2767 assume 0 != main_~tmp~19; 1124612#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1122997#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1121567#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 1121507#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1121908#L515 assume 0 == initPersonOnFloor_~floor; 1121559#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1119785#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1122580#L307 assume !(0 == callOnFloor_~floorID); 1122325#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1122310#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1123353#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1120883#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1120884#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1121988#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1122159#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1120560#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1123423#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1120541#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1120380#L244 assume !(0 == isFloorCalling_~floorID); 1120381#L248 assume !(1 == isFloorCalling_~floorID); 1121550#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1121478#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1123761#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1123763#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1123464#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1120536#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1124830#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1124831#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1125992#L1938 assume !(0 != timeShift_~tmp___9~2); 1125993#L2029 assume !(1 == ~doorState~0); 1125171#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1125172#L1378 assume !(1 == stopRequestedInDirection_~dir); 1122279#L1547 assume !(0 == ~currentFloorID~0); 1122280#L1553 assume ~currentFloorID~0 > 0; 1123099#L1554 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1123018#L1568 assume ~currentFloorID~0 > 0; 1121841#L1570 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1121842#L1571 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1126134#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1126135#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1143961#L1754 assume !(1 == ~currentHeading~0); 1143959#L1764 assume !(0 == ~currentFloorID~0); 1143954#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1143953#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1143951#L2935 assume !(-1 == ~expectedDirection~0); 1143947#L2947 assume !(1 == ~expectedDirection~0); 1143928#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1143926#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1143924#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1143921#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1143915#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1143912#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1143908#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1143843#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1143825#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1143781#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1143779#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1143778#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1143777#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1143775#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 1143774#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1143766#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1143745#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1143727#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1143610#L1938-1 assume !(0 != timeShift_~tmp___9~2); 1143581#L2029-3 assume !(1 == ~doorState~0); 1143579#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1143577#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 1143578#L1547-2 assume !(0 == ~currentFloorID~0); 1143652#L1553-2 assume !(~currentFloorID~0 > 0); 1143728#L1568-2 assume ~currentFloorID~0 > 0; 1143729#L1570-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1143854#L1571-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1143838#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1143818#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1143813#L1754-3 assume !(1 == ~currentHeading~0); 1143809#L1764-9 assume !(0 == ~currentFloorID~0); 1143435#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1143430#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1149069#L2935-1 assume !(-1 == ~expectedDirection~0); 1149066#L2947-1 assume !(1 == ~expectedDirection~0); 1149065#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1149056#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1143406#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1143407#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1148790#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1143266#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1136479#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1136418#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1136420#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1136319#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1136320#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1136820#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1136817#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1136813#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 1136810#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1136804#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1136800#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1136797#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1136793#L1938-2 assume !(0 != timeShift_~tmp___9~2); 1136790#L2029-6 assume !(1 == ~doorState~0); 1136693#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1136691#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 1136692#L1547-4 assume !(0 == ~currentFloorID~0); 1136821#L1553-4 assume !(~currentFloorID~0 > 0); 1136818#L1568-4 assume ~currentFloorID~0 > 0; 1136819#L1570-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1136939#L1571-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1136920#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1136909#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1136903#L1754-6 assume !(1 == ~currentHeading~0); 1136883#L1764-18 assume !(0 == ~currentFloorID~0); 1136529#L1764-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1136525#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1165759#L2935-2 assume !(-1 == ~expectedDirection~0); 1165756#L2947-2 assume !(1 == ~expectedDirection~0); 1165755#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1165753#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 1165748#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1165747#L515-1 assume 0 == initPersonOnFloor_~floor; 1165713#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1165696#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1165694#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1165695#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1178856#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1178854#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1178850#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1178849#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1178847#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1178842#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1178438#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1173042#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1173041#L244-63 assume !(0 == isFloorCalling_~floorID); 1173038#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1173036#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1173035#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1173034#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1173031#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1173029#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1173027#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1173021#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1173018#L1938-3 assume !(0 != timeShift_~tmp___9~2); 1173019#L2029-9 assume !(1 == ~doorState~0); 1179115#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1123236#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 1123237#L1547-6 assume !(0 == ~currentFloorID~0); 1179114#L1553-6 assume ~currentFloorID~0 > 0; 1123081#L1554-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1120030#L1568-6 assume ~currentFloorID~0 > 0; 1120031#L1570-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1121965#L1571-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1119946#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1184804#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1120924#L1754-9 assume !(1 == ~currentHeading~0); 1120925#L1764-27 assume !(0 == ~currentFloorID~0); 1124981#L1764-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1184825#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1184823#L2935-3 assume !(-1 == ~expectedDirection~0); 1184817#L2947-3 assume !(1 == ~expectedDirection~0); 1184812#L2948-3 cleanup_~i~3 := 0; 1184810#L2576-2 [2018-12-08 08:08:23,776 INFO L796 eck$LassoCheckResult]: Loop: 1184810#L2576-2 assume !false; 1184808#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1184806#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 1184805#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 1184415#L2584 assume 1 != cleanup_~tmp___0~8; 1172596#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1172595#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1172594#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 1172593#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 1172592#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 1172590#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 1172588#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1172586#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1172585#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1172580#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1172579#L2866-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1172564#L1191-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1172556#L1212-49 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1172548#L2870-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1172547#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1172546#L244-89 assume !(0 == isFloorCalling_~floorID); 1172543#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1172541#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1172540#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1172539#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1172531#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1172528#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1172526#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1172525#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1172518#L1938-4 assume !(0 != timeShift_~tmp___9~2); 1158082#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1180827#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1157992#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 1157993#L1547-8 assume !(0 == ~currentFloorID~0); 1157989#L1553-8 assume ~currentFloorID~0 > 0; 1157743#L1554-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1180825#L244-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1125776#L271-95 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1125777#L1558-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1119967#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1184801#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1120840#L1754-12 assume !(1 == ~currentHeading~0); 1120842#L1764-36 assume !(0 == ~currentFloorID~0); 1124967#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1184866#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1184820#L2935-4 assume !(-1 == ~expectedDirection~0); 1184814#L2947-4 assume !(1 == ~expectedDirection~0); 1184811#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 1184810#L2576-2 [2018-12-08 08:08:23,783 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:23,783 INFO L82 PathProgramCache]: Analyzing trace with hash -1417155902, now seen corresponding path program 1 times [2018-12-08 08:08:23,783 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:23,784 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:23,784 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:23,784 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:08:23,784 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:23,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:23,822 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:23,822 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:23,822 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 08:08:23,823 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:08:23,823 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:23,823 INFO L82 PathProgramCache]: Analyzing trace with hash -377856624, now seen corresponding path program 1 times [2018-12-08 08:08:23,823 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:23,823 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:23,823 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:23,823 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:08:23,824 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:23,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:23,842 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:23,842 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:23,842 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 08:08:23,842 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:08:23,843 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 08:08:23,843 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 08:08:23,843 INFO L87 Difference]: Start difference. First operand 65613 states and 122318 transitions. cyclomatic complexity: 56707 Second operand 5 states. [2018-12-08 08:08:24,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:08:24,479 INFO L93 Difference]: Finished difference Result 118983 states and 221474 transitions. [2018-12-08 08:08:24,479 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-08 08:08:24,480 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 118983 states and 221474 transitions. [2018-12-08 08:08:24,790 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 30968 [2018-12-08 08:08:25,028 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 118983 states to 118983 states and 221474 transitions. [2018-12-08 08:08:25,029 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 118983 [2018-12-08 08:08:25,097 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 118983 [2018-12-08 08:08:25,097 INFO L73 IsDeterministic]: Start isDeterministic. Operand 118983 states and 221474 transitions. [2018-12-08 08:08:25,152 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:08:25,152 INFO L705 BuchiCegarLoop]: Abstraction has 118983 states and 221474 transitions. [2018-12-08 08:08:25,204 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118983 states and 221474 transitions. [2018-12-08 08:08:25,875 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118983 to 116511. [2018-12-08 08:08:25,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 116511 states. [2018-12-08 08:08:26,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116511 states to 116511 states and 217568 transitions. [2018-12-08 08:08:26,004 INFO L728 BuchiCegarLoop]: Abstraction has 116511 states and 217568 transitions. [2018-12-08 08:08:26,004 INFO L608 BuchiCegarLoop]: Abstraction has 116511 states and 217568 transitions. [2018-12-08 08:08:26,005 INFO L442 BuchiCegarLoop]: ======== Iteration 13============ [2018-12-08 08:08:26,005 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 116511 states and 217568 transitions. [2018-12-08 08:08:26,216 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 30272 [2018-12-08 08:08:26,216 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:08:26,216 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:08:26,218 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:26,218 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:26,219 INFO L794 eck$LassoCheckResult]: Stem: 1308860#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 1308861#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 1307194#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 1306778#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 1306779#L2767 assume 0 != main_~tmp~19; 1309165#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1307531#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1306173#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 1306114#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1306478#L515 assume 0 == initPersonOnFloor_~floor; 1306166#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1304401#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1307100#L307 assume !(0 == callOnFloor_~floorID); 1306853#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1306839#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1307882#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1305495#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1305496#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1306525#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1306690#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1304752#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1304753#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1309551#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1309552#L244 assume !(0 == isFloorCalling_~floorID); 1304376#L248 assume !(1 == isFloorCalling_~floorID); 1304377#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1310541#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1310542#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1307038#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1307039#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1304735#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1304736#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1310616#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1310617#L1938 assume !(0 != timeShift_~tmp___9~2); 1309751#L2029 assume !(1 == ~doorState~0); 1309752#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1307608#L1378 assume !(1 == stopRequestedInDirection_~dir); 1307609#L1547 assume !(0 == ~currentFloorID~0); 1307688#L1553 assume ~currentFloorID~0 > 0; 1307689#L1554 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1307548#L1568 assume ~currentFloorID~0 > 0; 1306417#L1570 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1306418#L1571 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1308085#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1308086#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1310692#L1754 assume !(1 == ~currentHeading~0); 1312072#L1764 assume !(0 == ~currentFloorID~0); 1312070#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1311143#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1312068#L2935 assume !(-1 == ~expectedDirection~0); 1312064#L2947 assume !(1 == ~expectedDirection~0); 1312017#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1312014#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1312013#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1312012#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1312010#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1312008#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1312006#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1312004#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1312002#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1312001#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1312000#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1311999#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1311998#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1311997#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 1311996#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1311992#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1311991#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1311990#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1311988#L1938-1 assume !(0 != timeShift_~tmp___9~2); 1311987#L2029-3 assume !(1 == ~doorState~0); 1311986#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1311984#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 1311971#L1547-2 assume !(0 == ~currentFloorID~0); 1311972#L1553-2 assume !(~currentFloorID~0 > 0); 1312032#L1568-2 assume ~currentFloorID~0 > 0; 1318847#L1570-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1331672#L1571-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1312357#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1314889#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1314890#L1754-3 assume !(1 == ~currentHeading~0); 1331493#L1764-9 assume !(0 == ~currentFloorID~0); 1314597#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1322457#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1336532#L2935-1 assume !(-1 == ~expectedDirection~0); 1336528#L2947-1 assume !(1 == ~expectedDirection~0); 1336523#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1336521#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1336522#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1336462#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1322418#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1336223#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1336222#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1336221#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1336220#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1336219#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1336217#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1336216#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1336214#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1336209#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 1336104#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1336100#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1336099#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1336096#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1336094#L1938-2 assume !(0 != timeShift_~tmp___9~2); 1336092#L2029-6 assume !(1 == ~doorState~0); 1336091#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1336087#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 1336088#L1547-4 assume !(0 == ~currentFloorID~0); 1336461#L1553-4 assume !(~currentFloorID~0 > 0); 1345866#L1568-4 assume ~currentFloorID~0 > 0; 1304626#L1570-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1306522#L1571-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1304535#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1308110#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1417946#L1754-6 assume !(1 == ~currentHeading~0); 1336008#L1764-18 assume !(0 == ~currentFloorID~0); 1309796#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1309754#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1309453#L2935-2 assume !(-1 == ~expectedDirection~0); 1307314#L2947-2 assume !(1 == ~expectedDirection~0); 1306861#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1306174#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 1306121#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1306481#L515-1 assume 0 == initPersonOnFloor_~floor; 1306482#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1414798#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1414797#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1306843#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1360983#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1360976#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1360974#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1315205#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1380440#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1380434#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1380430#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1380429#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1380428#L244-63 assume !(0 == isFloorCalling_~floorID); 1380425#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1380423#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1378722#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1378723#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1378731#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1378729#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1378726#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1378727#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1378712#L1938-3 assume !(0 != timeShift_~tmp___9~2); 1378713#L2029-9 assume !(1 == ~doorState~0); 1408041#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1408039#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 1408038#L1547-6 assume !(0 == ~currentFloorID~0); 1408037#L1553-6 assume ~currentFloorID~0 > 0; 1407806#L1554-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1408008#L1568-6 assume ~currentFloorID~0 > 0; 1407804#L1570-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1408022#L1571-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1407995#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1407996#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1420430#L1754-9 assume !(1 == ~currentHeading~0); 1347425#L1764-27 assume !(0 == ~currentFloorID~0); 1347420#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1347412#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1407622#L2935-3 assume !(-1 == ~expectedDirection~0); 1407617#L2947-3 assume !(1 == ~expectedDirection~0); 1407614#L2948-3 cleanup_~i~3 := 0; 1407610#L2576-2 [2018-12-08 08:08:26,219 INFO L796 eck$LassoCheckResult]: Loop: 1407610#L2576-2 assume !false; 1407520#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1406911#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 1371703#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 1371702#L2584 assume 1 != cleanup_~tmp___0~8; 1371701#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1371700#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1371699#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 1371698#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 1371696#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 1371694#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 1371689#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1361001#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1361000#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1353289#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1353288#L2866-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1346854#L1191-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1380395#L1212-49 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1380390#L2870-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1380389#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1380388#L244-89 assume !(0 == isFloorCalling_~floorID); 1380385#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1380383#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1380382#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1380381#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1380378#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1380376#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1380374#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1380373#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1380365#L1938-4 assume !(0 != timeShift_~tmp___9~2); 1380366#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1411052#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1411050#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 1411049#L1547-8 assume !(0 == ~currentFloorID~0); 1346378#L1553-8 assume ~currentFloorID~0 > 0; 1346379#L1554-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1304599#L244-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1304600#L271-95 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1310404#L1558-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1346249#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1409374#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1409363#L1754-12 assume !(1 == ~currentHeading~0); 1309545#L1764-36 assume !(0 == ~currentFloorID~0); 1309546#L1764-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1407607#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1408249#L2935-4 assume !(-1 == ~expectedDirection~0); 1408245#L2947-4 assume !(1 == ~expectedDirection~0); 1407613#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 1407610#L2576-2 [2018-12-08 08:08:26,227 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:26,227 INFO L82 PathProgramCache]: Analyzing trace with hash 523853186, now seen corresponding path program 1 times [2018-12-08 08:08:26,227 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:26,227 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:26,227 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:26,227 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:08:26,228 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:26,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:26,265 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:26,265 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:26,265 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 08:08:26,265 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:08:26,266 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:08:26,266 INFO L82 PathProgramCache]: Analyzing trace with hash -376009582, now seen corresponding path program 1 times [2018-12-08 08:08:26,266 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:08:26,266 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:08:26,266 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:26,266 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:08:26,266 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:08:26,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:08:26,441 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:08:26,441 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:08:26,441 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 08:08:26,441 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:08:26,441 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-08 08:08:26,441 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-08 08:08:26,442 INFO L87 Difference]: Start difference. First operand 116511 states and 217568 transitions. cyclomatic complexity: 101059 Second operand 3 states. [2018-12-08 08:08:26,841 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:08:26,841 INFO L93 Difference]: Finished difference Result 151431 states and 282243 transitions. [2018-12-08 08:08:26,841 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-08 08:08:26,841 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 151431 states and 282243 transitions. [2018-12-08 08:08:27,232 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 38300 [2018-12-08 08:08:27,529 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 151431 states to 151431 states and 282243 transitions. [2018-12-08 08:08:27,529 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 151431 [2018-12-08 08:08:27,618 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 151431 [2018-12-08 08:08:27,618 INFO L73 IsDeterministic]: Start isDeterministic. Operand 151431 states and 282243 transitions. [2018-12-08 08:08:27,688 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:08:27,688 INFO L705 BuchiCegarLoop]: Abstraction has 151431 states and 282243 transitions. [2018-12-08 08:08:27,756 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151431 states and 282243 transitions. [2018-12-08 08:08:28,543 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151431 to 148487. [2018-12-08 08:08:28,544 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 148487 states. [2018-12-08 08:08:28,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148487 states to 148487 states and 277239 transitions. [2018-12-08 08:08:28,705 INFO L728 BuchiCegarLoop]: Abstraction has 148487 states and 277239 transitions. [2018-12-08 08:08:28,705 INFO L608 BuchiCegarLoop]: Abstraction has 148487 states and 277239 transitions. [2018-12-08 08:08:28,705 INFO L442 BuchiCegarLoop]: ======== Iteration 14============ [2018-12-08 08:08:28,705 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 148487 states and 277239 transitions. [2018-12-08 08:08:28,972 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 37440 [2018-12-08 08:08:28,973 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:08:28,973 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:08:28,976 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:28,976 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:08:28,976 INFO L794 eck$LassoCheckResult]: Stem: 1576745#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 1576746#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 1575102#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 1574682#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 1574683#L2767 assume 0 != main_~tmp~19; 1577049#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1575430#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1574102#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 1574044#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1574391#L515 assume 0 == initPersonOnFloor_~floor; 1574095#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1572353#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1575002#L307 assume !(0 == callOnFloor_~floorID); 1574757#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1574742#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1575748#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1573433#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1573434#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1574427#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1574592#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1572704#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1572705#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1573096#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1577433#L244 assume !(0 == isFloorCalling_~floorID); 1572328#L248 assume !(1 == isFloorCalling_~floorID); 1572329#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1578367#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1576181#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1574945#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1574946#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1572687#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1572688#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1577265#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1578422#L1938 assume !(0 != timeShift_~tmp___9~2); 1578423#L2029 assume !(1 == ~doorState~0); 1577636#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1577637#L1378 assume !(1 == stopRequestedInDirection_~dir); 1579966#L1547 assume !(0 == ~currentFloorID~0); 1579965#L1553 assume ~currentFloorID~0 > 0; 1575524#L1554 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1571919#L1568 assume ~currentFloorID~0 > 0; 1571920#L1570 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1574326#L1571 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1574416#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1580076#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1580077#L1754 assume !(1 == ~currentHeading~0); 1580687#L1764 assume !(0 == ~currentFloorID~0); 1580682#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1579860#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1580674#L2935 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1580671#L1226-1 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 1580669#L2939 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 1580663#L2947 assume !(1 == ~expectedDirection~0); 1580646#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1580645#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1580644#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1580643#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1580642#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1580641#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1580640#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1580639#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1580638#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1580634#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1580631#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1580632#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1580751#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1580750#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 1580749#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1580745#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1580744#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1580743#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1580741#L1938-1 assume !(0 != timeShift_~tmp___9~2); 1580740#L2029-3 assume !(1 == ~doorState~0); 1580739#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1580735#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 1580722#L1547-2 assume !(0 == ~currentFloorID~0); 1580723#L1553-2 assume !(~currentFloorID~0 > 0); 1580759#L1568-2 assume ~currentFloorID~0 > 0; 1572554#L1570-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1574340#L1571-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1574422#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1582040#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1585820#L1754-3 assume !(1 == ~currentHeading~0); 1637350#L1764-9 assume !(0 == ~currentFloorID~0); 1581739#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1581735#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1657309#L2935-1 assume !(-1 == ~expectedDirection~0); 1657307#L2947-1 assume !(1 == ~expectedDirection~0); 1657301#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1657300#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1657299#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1657298#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1580352#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1657296#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1657294#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1657292#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1657290#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1657287#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1657286#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1657284#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1657283#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1657281#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 1657279#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1657274#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1657273#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1657272#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1657267#L1938-2 assume !(0 != timeShift_~tmp___9~2); 1657265#L2029-6 assume !(1 == ~doorState~0); 1657264#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1657262#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 1657209#L1547-4 assume !(0 == ~currentFloorID~0); 1657099#L1553-4 assume !(~currentFloorID~0 > 0); 1657100#L1568-4 assume ~currentFloorID~0 > 0; 1574303#L1570-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1574304#L1571-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1574335#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1656947#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1573443#L1754-6 assume !(1 == ~currentHeading~0); 1573444#L1764-18 assume !(0 == ~currentFloorID~0); 1577659#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1577631#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1620620#L2935-2 assume !(-1 == ~expectedDirection~0); 1620621#L2947-2 assume !(1 == ~expectedDirection~0); 1620616#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1619135#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 1618704#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1618696#L515-1 assume 0 == initPersonOnFloor_~floor; 1618609#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1618561#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1618553#L307-2 assume !(0 == callOnFloor_~floorID); 1618554#L310-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1704016#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1704015#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1704014#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1704013#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1689362#L2866-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1680704#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1680703#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1680701#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1680699#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1680698#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1680696#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1680695#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1680694#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1680692#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1680684#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1680681#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1680678#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1680676#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1680672#L1938-3 assume !(0 != timeShift_~tmp___9~2); 1680670#L2029-9 assume !(1 == ~doorState~0); 1680668#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1680666#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 1680648#L1547-6 assume !(0 == ~currentFloorID~0); 1680649#L1553-6 assume !(~currentFloorID~0 > 0); 1680865#L1568-6 assume ~currentFloorID~0 > 0; 1680866#L1570-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1693946#L1571-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1693927#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1693921#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1573472#L1754-9 assume !(1 == ~currentHeading~0); 1573473#L1764-27 assume !(0 == ~currentFloorID~0); 1577441#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1661436#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1717512#L2935-3 assume !(-1 == ~expectedDirection~0); 1717509#L2947-3 assume !(1 == ~expectedDirection~0); 1717506#L2948-3 cleanup_~i~3 := 0; 1717504#L2576-2 WARNING: YOUR LOGFILE WAS TOO LONG, SOME LINES IN THE MIDDLE WERE REMOVED. [2018-12-08 08:10:30,432 INFO L796 eck$LassoCheckResult]: Loop: 8898818#L2576-2 assume !false; 8898813#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 8898814#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 8898804#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 8898805#L2584 assume 1 != cleanup_~tmp___0~8; 8898089#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 8898090#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 8898082#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 8898083#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 8898078#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 8898079#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 8898074#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 8898075#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 8898028#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 8898029#L2804-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8918277#L2805-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 8918273#L2815-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 8781040#L2826-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 8918222#L2837-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 8917843#L2848-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 8781032#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 8917839#L244-89 assume !(0 == isFloorCalling_~floorID); 8917834#L248-89 assume !(1 == isFloorCalling_~floorID); 8917832#L252-89 assume !(2 == isFloorCalling_~floorID); 8917821#L256-89 assume !(3 == isFloorCalling_~floorID); 8917818#L260-89 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 8915936#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 8915931#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 8915932#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 8915938#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 8915935#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 8915933#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 8915934#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 8817665#L1938-4 assume !(0 != timeShift_~tmp___9~2); 8817663#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 8817659#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 8817657#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 8776016#L1547-8 assume !(0 == ~currentFloorID~0); 8776017#L1553-8 assume ~currentFloorID~0 > 0; 8781248#L1554-8 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 8816946#L1568-8 assume ~currentFloorID~0 > 0; 8781246#L1570-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 8816927#L1571-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8816919#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 8822945#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 8816910#L1754-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 8816908#L818-21 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 8797452#L1758-36 assume !(0 != continueInDirection_~tmp~6); 8797453#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8901657#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 8901654#L2935-4 assume !(-1 == ~expectedDirection~0); 8901652#L2947-4 assume !(1 == ~expectedDirection~0); 8898817#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 8898818#L2576-2 [2018-12-08 08:10:30,447 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:10:30,447 INFO L82 PathProgramCache]: Analyzing trace with hash 1147959307, now seen corresponding path program 2 times [2018-12-08 08:10:30,447 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:10:30,447 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:10:30,448 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:10:30,448 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:10:30,448 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:10:30,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:10:30,856 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:10:30,857 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:10:30,857 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 08:10:30,857 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:10:30,857 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:10:30,857 INFO L82 PathProgramCache]: Analyzing trace with hash 1636618747, now seen corresponding path program 1 times [2018-12-08 08:10:30,857 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:10:30,857 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:10:30,857 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:10:30,858 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-08 08:10:30,858 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:10:30,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:10:30,881 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:10:30,881 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:10:30,881 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 08:10:30,881 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:10:30,881 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 08:10:30,881 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 08:10:30,882 INFO L87 Difference]: Start difference. First operand 443453 states and 827221 transitions. cyclomatic complexity: 383793 Second operand 5 states. [2018-12-08 08:10:37,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:10:37,506 INFO L93 Difference]: Finished difference Result 928029 states and 1725064 transitions. [2018-12-08 08:10:37,506 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-12-08 08:10:37,506 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 928029 states and 1725064 transitions. [2018-12-08 08:10:40,448 INFO L131 ngComponentsAnalysis]: Automaton has 27 accepting balls. 263736 [2018-12-08 08:10:42,406 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 928029 states to 928029 states and 1725064 transitions. [2018-12-08 08:10:42,406 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 885743 [2018-12-08 08:10:43,324 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 885743 [2018-12-08 08:10:43,324 INFO L73 IsDeterministic]: Start isDeterministic. Operand 928029 states and 1725064 transitions. [2018-12-08 08:10:43,431 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-12-08 08:10:43,431 INFO L705 BuchiCegarLoop]: Abstraction has 928029 states and 1725064 transitions. [2018-12-08 08:10:43,770 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 928029 states and 1725064 transitions. [2018-12-08 08:10:47,176 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 928029 to 443141. [2018-12-08 08:10:47,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 443141 states. [2018-12-08 08:10:48,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 443141 states to 443141 states and 826117 transitions. [2018-12-08 08:10:48,223 INFO L728 BuchiCegarLoop]: Abstraction has 443141 states and 826117 transitions. [2018-12-08 08:10:48,223 INFO L608 BuchiCegarLoop]: Abstraction has 443141 states and 826117 transitions. [2018-12-08 08:10:48,223 INFO L442 BuchiCegarLoop]: ======== Iteration 22============ [2018-12-08 08:10:48,223 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 443141 states and 826117 transitions. [2018-12-08 08:10:48,908 INFO L131 ngComponentsAnalysis]: Automaton has 17 accepting balls. 122991 [2018-12-08 08:10:48,908 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:10:48,908 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:10:48,912 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:10:48,912 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:10:48,912 INFO L794 eck$LassoCheckResult]: Stem: 9907338#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 9907339#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 9905451#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 9905002#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 9905003#L2767 assume 0 != main_~tmp~19; 9907698#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 9905817#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 9904225#L868 assume !(0 == getOrigin_~person); 9904145#L872 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 9904146#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 9909424#L515 assume 0 == initPersonOnFloor_~floor; 9904215#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 9902214#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 9905350#L307 assume !(0 == callOnFloor_~floorID); 9905080#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 9905064#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 9907998#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 9907999#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 9904669#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 9904670#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 9905313#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 9905314#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 9906253#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 9904488#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 9910481#L244 assume !(0 == isFloorCalling_~floorID); 9910466#L248 assume !(1 == isFloorCalling_~floorID); 9910464#L252 assume !(2 == isFloorCalling_~floorID); 9910461#L256 assume !(3 == isFloorCalling_~floorID); 9910459#L260 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~0 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 9910457#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 9910456#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 9910455#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 9910454#L1195-10 assume !(1 == buttonForFloorIsPressed_~floorID); 9910451#L1199-10 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 9910450#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9910449#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 9910448#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 9910447#L1938 assume !(0 != timeShift_~tmp___9~2); 9910446#L2029 assume !(1 == ~doorState~0); 9910445#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 9910443#L1378 assume !(1 == stopRequestedInDirection_~dir); 9910444#L1547 assume !(0 == ~currentFloorID~0); 9910471#L1553 assume ~currentFloorID~0 > 0; 9910468#L1554 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 9910465#L1568 assume ~currentFloorID~0 > 0; 9910463#L1570 assume !(0 != stopRequestedInDirection_~respectInLiftCalls); 9910460#L1581 assume !(~currentFloorID~0 > 1); 9910386#L1597 assume ~currentFloorID~0 > 1; 9910458#L1599 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 9910372#L1600 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 9910266#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 9910262#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 9910261#L1754 assume !(1 == ~currentHeading~0); 9910022#L1764 assume !(0 == ~currentFloorID~0); 9909980#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9909975#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 9909976#L2935 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 9909962#L1226-1 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 9909963#L2939 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 9909883#L2947 assume !(1 == ~expectedDirection~0); 9909884#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 9909879#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 9909880#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 9909875#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 9909876#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 9909869#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 9909871#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 9909863#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 9909865#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 9909858#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 9909859#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 9909853#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 9909854#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 9909848#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 9909849#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9909843#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 9909845#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 9909838#L1938-1 assume !(0 != timeShift_~tmp___9~2); 9909839#L2029-3 assume !(1 == ~doorState~0); 9909834#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 9909835#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 9909991#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 9909979#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 9909974#L2037-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 9909969#L1809-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~17 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 9909961#L1814-2 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 9909953#L1378-3 assume !(1 == stopRequestedInDirection_~dir); 9909954#L1547-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 9909753#L1700-3 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 9909754#L2046-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 9909744#L1754-5 assume !(1 == ~currentHeading~0); 9909742#L1764-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 9909738#L1764-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 9909736#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 10013896#L2935-1 assume !(-1 == ~expectedDirection~0); 10013892#L2947-1 assume !(1 == ~expectedDirection~0); 10013890#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 10013889#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 10013888#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 10013886#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 10013887#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 10017821#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 10017819#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 10017817#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 10017815#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 10017813#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 10017814#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 10017807#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 10017803#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 10017802#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 10017801#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 10017799#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 10017798#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 10017796#L1938-2 assume !(0 != timeShift_~tmp___9~2); 10017795#L2029-6 assume !(1 == ~doorState~0); 10017794#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 10017792#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 10017793#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 10017748#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 10046991#L2037-2 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 10013653#L1809-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 10046990#L1814-4 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 10105911#L1378-5 assume !(1 == stopRequestedInDirection_~dir); 10105910#L1547-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 10105909#L1700-5 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 10105908#L2046-2 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 10013638#L1754-8 assume !(1 == ~currentHeading~0); 10013632#L1764-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 10013621#L1764-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 10013618#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 10013616#L2935-2 assume !(-1 == ~expectedDirection~0); 10013615#L2947-2 assume !(1 == ~expectedDirection~0); 10013610#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 10013608#L868-1 assume !(0 == getOrigin_~person); 10013607#L872-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 10013602#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 10013601#L515-1 assume 0 == initPersonOnFloor_~floor; 10013584#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 10013567#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 10013565#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 10013566#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 10041058#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 10041057#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 10041055#L2804-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 10041053#L2805-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 10041054#L1191-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 10041976#L1212-33 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 10041968#L2809-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 10041959#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 10041032#L244-63 assume !(0 == isFloorCalling_~floorID); 10040669#L248-63 assume !(1 == isFloorCalling_~floorID); 10040668#L252-63 assume !(2 == isFloorCalling_~floorID); 10040667#L256-63 assume !(3 == isFloorCalling_~floorID); 10040666#L260-63 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~0 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 10040665#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 10040656#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 10040657#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 10040664#L1195-43 assume !(1 == buttonForFloorIsPressed_~floorID); 10040662#L1199-43 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 10040660#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 10040658#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 10040659#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 10041770#L1938-3 assume !(0 != timeShift_~tmp___9~2); 10041769#L2029-9 assume !(1 == ~doorState~0); 10041768#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 10041766#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 10041767#L1547-6 assume !(0 == ~currentFloorID~0); 10041836#L1553-6 assume !(~currentFloorID~0 > 0); 10041834#L1568-6 assume ~currentFloorID~0 > 0; 10041835#L1570-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 10083696#L1571-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 10083697#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 10113849#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 10113315#L1754-9 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 9906556#L818-16 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 9906557#L1758-27 assume !(0 != continueInDirection_~tmp~6); 10005876#L1764-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 9908120#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 10263030#L2935-3 assume !(-1 == ~expectedDirection~0); 10263031#L2947-3 assume !(1 == ~expectedDirection~0); 10252888#L2948-3 cleanup_~i~3 := 0; 10252887#L2576-2 [2018-12-08 08:10:48,913 INFO L796 eck$LassoCheckResult]: Loop: 10252887#L2576-2 assume !false; 10252882#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 10252883#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 10252878#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 10252879#L2584 assume 1 != cleanup_~tmp___0~8; 10252874#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 10252875#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 10252870#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 10252871#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 10252866#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 10252867#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 10252862#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 10252863#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 10261224#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 10261225#L2804-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 10261168#L2805-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 10261155#L2815-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 10171539#L2826-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2;buttonForFloorIsPressed_#in~floorID := 2;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 10259604#L1191-46 assume !(0 == buttonForFloorIsPressed_~floorID); 10259601#L1195-46 assume !(1 == buttonForFloorIsPressed_~floorID); 10259598#L1199-46 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 10259591#L1212-46 __utac_acc__Specification3_spec__1_#t~ret116 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___2~6 := __utac_acc__Specification3_spec__1_#t~ret116;havoc __utac_acc__Specification3_spec__1_#t~ret116; 10259587#L2831-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___2~6;~expectedDirection~0 := 1; 10259583#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 10259582#L244-89 assume !(0 == isFloorCalling_~floorID); 10259580#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 10259579#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 10259577#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 10259578#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 10259618#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 10259607#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 10259575#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 10259535#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 10259536#L1938-4 assume !(0 != timeShift_~tmp___9~2); 10266670#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 10266669#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 10266667#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 10266668#L1547-8 assume !(0 == ~currentFloorID~0); 10276359#L1553-8 assume ~currentFloorID~0 > 0; 10171837#L1554-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 10276356#L244-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 10276352#L271-95 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 10276320#L1558-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 10266600#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 10266561#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 10266559#L1754-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 10249074#L818-21 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 9908800#L1758-36 assume !(0 != continueInDirection_~tmp~6); 9908802#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 10252899#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 10252896#L2935-4 assume !(-1 == ~expectedDirection~0); 10252897#L2947-4 assume !(1 == ~expectedDirection~0); 10252886#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 10252887#L2576-2 [2018-12-08 08:10:48,928 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:10:48,928 INFO L82 PathProgramCache]: Analyzing trace with hash -922790219, now seen corresponding path program 1 times [2018-12-08 08:10:48,928 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:10:48,928 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:10:48,929 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:10:48,929 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:10:48,929 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:10:48,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:10:48,960 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:10:48,960 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:10:48,960 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 08:10:48,960 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:10:48,960 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:10:48,960 INFO L82 PathProgramCache]: Analyzing trace with hash 583552318, now seen corresponding path program 1 times [2018-12-08 08:10:48,960 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:10:48,960 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:10:48,961 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:10:48,961 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:10:48,961 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:10:48,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:10:48,981 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:10:48,981 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:10:48,981 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-12-08 08:10:48,981 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:10:48,981 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-12-08 08:10:48,981 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-12-08 08:10:48,981 INFO L87 Difference]: Start difference. First operand 443141 states and 826117 transitions. cyclomatic complexity: 383001 Second operand 6 states. [2018-12-08 08:10:53,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:10:53,397 INFO L93 Difference]: Finished difference Result 529628 states and 986939 transitions. [2018-12-08 08:10:53,397 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-12-08 08:10:53,397 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 529628 states and 986939 transitions. [2018-12-08 08:10:55,114 INFO L131 ngComponentsAnalysis]: Automaton has 22 accepting balls. 149457 [2018-12-08 08:10:56,178 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 529628 states to 529601 states and 986908 transitions. [2018-12-08 08:10:56,178 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 500492 [2018-12-08 08:10:56,429 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 500492 [2018-12-08 08:10:56,429 INFO L73 IsDeterministic]: Start isDeterministic. Operand 529601 states and 986908 transitions. [2018-12-08 08:10:56,476 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-12-08 08:10:56,476 INFO L705 BuchiCegarLoop]: Abstraction has 529601 states and 986908 transitions. [2018-12-08 08:10:56,687 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 529601 states and 986908 transitions. [2018-12-08 08:10:59,015 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 529601 to 272296. [2018-12-08 08:10:59,015 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 272296 states. [2018-12-08 08:10:59,672 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 272296 states to 272296 states and 506378 transitions. [2018-12-08 08:10:59,672 INFO L728 BuchiCegarLoop]: Abstraction has 272296 states and 506378 transitions. [2018-12-08 08:10:59,672 INFO L608 BuchiCegarLoop]: Abstraction has 272296 states and 506378 transitions. [2018-12-08 08:10:59,672 INFO L442 BuchiCegarLoop]: ======== Iteration 23============ [2018-12-08 08:10:59,672 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 272296 states and 506378 transitions. [2018-12-08 08:11:00,057 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 75676 [2018-12-08 08:11:00,057 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:11:00,057 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:11:00,059 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:11:00,059 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:11:00,059 INFO L794 eck$LassoCheckResult]: Stem: 10880184#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 10880185#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 10878261#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 10877809#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 10877810#L2767 assume 0 != main_~tmp~19; 10880550#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 10878632#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 10877036#L868 assume !(0 == getOrigin_~person); 10876956#L872 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 10876957#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 10882324#L515 assume 0 == initPersonOnFloor_~floor; 10877027#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 10875016#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 10878157#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 10878158#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 10883775#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 10883774#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 10883773#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 10883772#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 10878119#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 10878120#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 10879077#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 10875916#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 10881054#L244 assume !(0 == isFloorCalling_~floorID); 10874994#L248 assume !(1 == isFloorCalling_~floorID); 10874995#L252 assume !(2 == isFloorCalling_~floorID); 10876929#L256 assume !(3 == isFloorCalling_~floorID); 10876930#L260 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~0 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 10882253#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 10882254#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 10878098#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 10878099#L1195-10 assume !(1 == buttonForFloorIsPressed_~floorID); 10879067#L1199-10 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 10875909#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 10880822#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 10880507#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 10880508#L1938 assume !(0 != timeShift_~tmp___9~2); 10881278#L2029 assume !(1 == ~doorState~0); 10881279#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 10878711#L1378 assume !(1 == stopRequestedInDirection_~dir); 10878712#L1547 assume !(0 == ~currentFloorID~0); 10878781#L1553 assume ~currentFloorID~0 > 0; 10878782#L1554 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 10930791#L244-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 10882248#L271-6 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 10882249#L1558 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 10877396#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 10879256#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 10876423#L1754 assume !(1 == ~currentHeading~0); 10876424#L1764 assume !(0 == ~currentFloorID~0); 10881373#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 10881361#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 10880905#L2935 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 10876197#L1226-1 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 10876198#L2939 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 10922213#L2947 assume !(1 == ~expectedDirection~0); 10893835#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 10888434#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 10888433#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 10888432#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 10888430#L2866-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 10888431#L1191-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 10972670#L1212-16 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 10972668#L2870-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 10972669#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 10989993#L244-21 assume !(0 == isFloorCalling_~floorID); 10989992#L248-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 10989991#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 10989989#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 10989990#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 10992801#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 10992757#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 10969663#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 10962712#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 10933022#L1938-1 assume !(0 != timeShift_~tmp___9~2); 10933003#L2029-3 assume !(1 == ~doorState~0); 10932903#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 10932901#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 10932900#L1547-2 assume !(0 == ~currentFloorID~0); 10932899#L1553-2 assume ~currentFloorID~0 > 0; 10932896#L1554-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 10932897#L244-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 10932898#L271-27 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 10932894#L1558-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 10932895#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 10933210#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 10933315#L1754-3 assume !(1 == ~currentHeading~0); 10933311#L1764-9 assume !(0 == ~currentFloorID~0); 10933305#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 10933301#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 10933211#L2935-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 10931933#L1226-4 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 10932529#L2939-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 10931478#L2947-1 assume !(1 == ~expectedDirection~0); 10930032#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 10926748#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 10926746#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 10926744#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 10926741#L2866-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 10926742#L1191-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 11002192#L1212-27 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 11002190#L2870-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 11002191#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 11004594#L244-42 assume !(0 == isFloorCalling_~floorID); 11004593#L248-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 10996718#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 10996713#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 10996714#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 10996722#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 10996717#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 10996715#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 10996716#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 10996705#L1938-2 assume !(0 != timeShift_~tmp___9~2); 10934743#L2029-6 assume !(1 == ~doorState~0); 10934730#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 10934728#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 10934727#L1547-4 assume !(0 == ~currentFloorID~0); 10934726#L1553-4 assume ~currentFloorID~0 > 0; 10934723#L1554-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 10934724#L244-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 10934725#L271-48 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 10934721#L1558-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 10934722#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 10935158#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 10937143#L1754-6 assume !(1 == ~currentHeading~0); 10937139#L1764-18 assume !(0 == ~currentFloorID~0); 10937134#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 10936975#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 10936537#L2935-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 10936141#L1226-7 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 10936443#L2939-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 10936136#L2947-2 assume !(1 == ~expectedDirection~0); 10936135#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 10936133#L868-1 assume !(0 == getOrigin_~person); 10936132#L872-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 10936127#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 10936126#L515-1 assume 0 == initPersonOnFloor_~floor; 10933879#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 10933858#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 10922196#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 10921850#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 10921849#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 10921848#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 10921847#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 10921845#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 10921846#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 11002005#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 11002002#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 11002003#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 11085664#L244-63 assume !(0 == isFloorCalling_~floorID); 11085660#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 11085661#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 11089191#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 11089190#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 11089187#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 11089185#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 11089183#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 11089182#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 11089181#L1938-3 assume !(0 != timeShift_~tmp___9~2); 10933708#L2029-9 assume !(1 == ~doorState~0); 10933702#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 10933700#L1378-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 10933701#L818-15 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 10933741#L1382-6 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 10933718#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 10933713#L2037-3 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 10933711#L1809-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~17 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 10933703#L1814-6 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 10933704#L1378-7 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 10938628#L818-17 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 10939917#L1382-7 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 10933665#L1700-7 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 10939309#L2046-3 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 10939310#L1809-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 10939337#L1814-7 timeShift_#t~ret49 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 10938999#L1754-10 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 10938998#L818-18 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 10938995#L1758-30 assume !(0 != continueInDirection_~tmp~6); 10938996#L1764-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 11071303#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 11071302#L2935-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 11071298#L1226-10 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 11071296#L2939-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 11071280#L2947-3 assume !(1 == ~expectedDirection~0); 11071242#L2948-3 cleanup_~i~3 := 0; 11071235#L2576-2 [2018-12-08 08:11:00,067 INFO L796 eck$LassoCheckResult]: Loop: 11071235#L2576-2 assume !false; 11071232#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 11071229#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 11071226#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 11071223#L2584 assume 1 != cleanup_~tmp___0~8; 11071220#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 11071217#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 11071214#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 11071211#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 11071191#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 11071188#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 11069576#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 11065310#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 11065308#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 11065306#L2804-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 11065304#L2805-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 11065302#L2815-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 11045117#L2826-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2;buttonForFloorIsPressed_#in~floorID := 2;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 11065301#L1191-46 assume !(0 == buttonForFloorIsPressed_~floorID); 11067651#L1195-46 assume !(1 == buttonForFloorIsPressed_~floorID); 11067647#L1199-46 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 11067645#L1212-46 __utac_acc__Specification3_spec__1_#t~ret116 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___2~6 := __utac_acc__Specification3_spec__1_#t~ret116;havoc __utac_acc__Specification3_spec__1_#t~ret116; 11067643#L2831-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___2~6;~expectedDirection~0 := 1; 11067639#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 11067634#L244-89 assume !(0 == isFloorCalling_~floorID); 11067632#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 11067625#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 11067624#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 11067623#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 11067620#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 11067584#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 11067581#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 11067580#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 11032000#L1938-4 assume !(0 != timeShift_~tmp___9~2); 11031993#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 11031988#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 11031987#L1378-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 11031986#L818-20 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 11031985#L1382-8 assume !(0 != stopRequestedInDirection_~tmp~5); 11031984#L1388-8 assume !(~currentFloorID~0 < 0); 11031982#L1403-8 assume !(~currentFloorID~0 < 0); 11031980#L1416-8 assume !(~currentFloorID~0 < 1); 11031925#L1432-8 assume !(~currentFloorID~0 < 1); 11031915#L1445-8 assume !(~currentFloorID~0 < 2); 11031975#L1461-8 assume ~currentFloorID~0 < 2; 11031963#L1463-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 11031964#L1464-8 assume 0 != ~floorButtons_2~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 11031745#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 11031746#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 11032014#L1754-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 11031731#L818-21 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 11031732#L1758-36 assume !(0 != continueInDirection_~tmp~6); 11071319#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 11071313#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 11071309#L2935-4 assume !(-1 == ~expectedDirection~0); 11071301#L2947-4 assume !(1 == ~expectedDirection~0); 11071241#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 11071235#L2576-2 [2018-12-08 08:11:00,078 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:11:00,078 INFO L82 PathProgramCache]: Analyzing trace with hash -1224643386, now seen corresponding path program 1 times [2018-12-08 08:11:00,079 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:11:00,079 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:11:00,079 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:00,079 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:11:00,079 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:00,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:11:00,121 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:11:00,122 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:11:00,122 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 08:11:00,122 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:11:00,122 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:11:00,122 INFO L82 PathProgramCache]: Analyzing trace with hash -749034350, now seen corresponding path program 1 times [2018-12-08 08:11:00,122 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:11:00,122 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:11:00,122 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:00,122 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:11:00,123 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:00,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:11:00,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:11:00,144 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:11:00,144 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 08:11:00,144 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:11:00,145 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 08:11:00,145 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 08:11:00,145 INFO L87 Difference]: Start difference. First operand 272296 states and 506378 transitions. cyclomatic complexity: 234101 Second operand 5 states. [2018-12-08 08:11:02,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:11:02,359 INFO L93 Difference]: Finished difference Result 345818 states and 640508 transitions. [2018-12-08 08:11:02,359 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-08 08:11:02,359 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 345818 states and 640508 transitions. [2018-12-08 08:11:03,237 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 93246 [2018-12-08 08:11:03,914 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 345818 states to 345818 states and 640508 transitions. [2018-12-08 08:11:03,914 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 330958 [2018-12-08 08:11:04,090 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 330958 [2018-12-08 08:11:04,090 INFO L73 IsDeterministic]: Start isDeterministic. Operand 345818 states and 640508 transitions. [2018-12-08 08:11:04,175 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-12-08 08:11:04,175 INFO L705 BuchiCegarLoop]: Abstraction has 345818 states and 640508 transitions. [2018-12-08 08:11:04,320 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 345818 states and 640508 transitions. [2018-12-08 08:11:06,664 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 345818 to 345628. [2018-12-08 08:11:06,664 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 345628 states. [2018-12-08 08:11:07,083 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 345628 states to 345628 states and 640302 transitions. [2018-12-08 08:11:07,083 INFO L728 BuchiCegarLoop]: Abstraction has 345628 states and 640302 transitions. [2018-12-08 08:11:07,083 INFO L608 BuchiCegarLoop]: Abstraction has 345628 states and 640302 transitions. [2018-12-08 08:11:07,084 INFO L442 BuchiCegarLoop]: ======== Iteration 24============ [2018-12-08 08:11:07,084 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 345628 states and 640302 transitions. [2018-12-08 08:11:07,649 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 93222 [2018-12-08 08:11:07,649 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:11:07,649 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:11:07,651 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:11:07,651 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:11:07,652 INFO L794 eck$LassoCheckResult]: Stem: 11498123#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 11498124#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 11496266#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 11495827#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 11495828#L2767 assume 0 != main_~tmp~19; 11498497#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 11496642#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 11495100#L868 assume !(0 == getOrigin_~person); 11495030#L872 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 11495031#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 11500092#L515 assume 0 == initPersonOnFloor_~floor; 11495090#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 11493146#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 11496163#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 11496164#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 11498791#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 11498792#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 11495500#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 11495501#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 11496125#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 11493599#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 11493600#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 11494032#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 11540768#L244 assume !(0 == isFloorCalling_~floorID); 11540767#L248 assume !(1 == isFloorCalling_~floorID); 11540766#L252 assume !(2 == isFloorCalling_~floorID); 11540765#L256 assume !(3 == isFloorCalling_~floorID); 11540764#L260 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~0 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 11540763#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 11540761#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 11540760#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 11540759#L1195-10 assume !(1 == buttonForFloorIsPressed_~floorID); 11540753#L1199-10 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 11540751#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 11540748#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 11540746#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 11540742#L1938 assume !(0 != timeShift_~tmp___9~2); 11540740#L2029 assume !(1 == ~doorState~0); 11540738#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 11540735#L1378 assume !(1 == stopRequestedInDirection_~dir); 11540733#L1547 assume !(0 == ~currentFloorID~0); 11540729#L1553 assume ~currentFloorID~0 > 0; 11540726#L1554 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 11540727#L244-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 11540825#L271-6 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 11540685#L1558 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 11540681#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 11540866#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 11540867#L1754 assume !(1 == ~currentHeading~0); 11603365#L1764 assume !(0 == ~currentFloorID~0); 11603352#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 11603351#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 11603334#L2935 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 11603333#L1226-1 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 11603332#L2939 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 11603330#L2947 assume !(1 == ~expectedDirection~0); 11603327#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 11603326#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 11603325#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 11603324#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 11603323#L2866-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 11603322#L1191-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 11603321#L1212-16 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 11603314#L2870-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 11603312#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 11603311#L244-21 assume !(0 == isFloorCalling_~floorID); 11603310#L248-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 11603309#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 11603295#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 11603296#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 11603308#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 11603299#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 11603297#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 11498457#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 11498458#L1938-1 assume !(0 != timeShift_~tmp___9~2); 11544466#L2029-3 assume !(1 == ~doorState~0); 11544464#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 11544461#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 11544459#L1547-2 assume !(0 == ~currentFloorID~0); 11544457#L1553-2 assume ~currentFloorID~0 > 0; 11544455#L1554-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 11544454#L244-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 11544453#L271-27 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 11544434#L1558-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 11544351#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 11544421#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 11544342#L1754-3 assume !(1 == ~currentHeading~0); 11544306#L1764-9 assume !(0 == ~currentFloorID~0); 11544297#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 11544296#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 11544289#L2935-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 11544290#L1226-4 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 11544285#L2939-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 11544286#L2947-1 assume !(1 == ~expectedDirection~0); 11598554#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 11598553#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 11598551#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 11598549#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 11598541#L2866-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 11598540#L1191-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 11598539#L1212-27 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 11598537#L2870-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 11598536#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 11598535#L244-42 assume !(0 == isFloorCalling_~floorID); 11598533#L248-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 11598528#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 11598523#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 11598524#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 11598532#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 11598527#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 11598525#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 11598526#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 11598515#L1938-2 assume !(0 != timeShift_~tmp___9~2); 11575213#L2029-6 assume !(1 == ~doorState~0); 11585777#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 11585776#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 11495817#L1547-4 assume !(0 == ~currentFloorID~0); 11495818#L1553-4 assume ~currentFloorID~0 > 0; 11496712#L1554-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 11493016#L244-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 11493017#L271-48 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 11496639#L1558-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 11495399#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 11673019#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 11673020#L1754-6 assume !(1 == ~currentHeading~0); 11673629#L1764-18 assume !(0 == ~currentFloorID~0); 11673606#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 11673604#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 11673603#L2935-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 11673579#L1226-7 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 11673602#L2939-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 11673574#L2947-2 assume !(1 == ~expectedDirection~0); 11673573#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 11673571#L868-1 assume !(0 == getOrigin_~person); 11673570#L872-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 11673565#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 11673564#L515-1 assume 0 == initPersonOnFloor_~floor; 11673541#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 11673525#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 11673520#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 11673517#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 11673516#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 11673515#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 11673483#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 11673481#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 11673478#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 11673477#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 11673475#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 11673476#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 11686588#L244-63 assume !(0 == isFloorCalling_~floorID); 11686626#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 11686621#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 11686619#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 11686618#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 11686551#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 11686552#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 11756679#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 11756673#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 11756671#L1938-3 assume !(0 != timeShift_~tmp___9~2); 11648629#L2029-9 assume !(1 == ~doorState~0); 11648628#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 11648626#L1378-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 11648627#L818-15 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 11674713#L1382-6 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 11674656#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 11674708#L2037-3 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 11674704#L1809-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~17 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 11674703#L1814-6 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 11674701#L1378-7 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 11674700#L818-17 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 11674699#L1382-7 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 11674539#L1700-7 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 11674530#L2046-3 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 11674531#L1809-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 11674533#L1814-7 timeShift_#t~ret49 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 11674525#L1754-10 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 11674526#L818-18 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 11674517#L1758-30 assume !(0 != continueInDirection_~tmp~6); 11674518#L1764-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 11706745#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 11706743#L2935-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 11706546#L1226-10 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 11706741#L2939-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 11706535#L2947-3 assume !(1 == ~expectedDirection~0); 11706532#L2948-3 cleanup_~i~3 := 0; 11706530#L2576-2 [2018-12-08 08:11:07,660 INFO L796 eck$LassoCheckResult]: Loop: 11706530#L2576-2 assume !false; 11706528#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 11706526#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 11706524#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 11706522#L2584 assume 1 != cleanup_~tmp___0~8; 11706520#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 11706518#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 11706516#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 11706514#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 11706512#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 11706510#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 11706508#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 11706506#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 11706505#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 11706456#L2804-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 11705047#L2805-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 11693282#L2815-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 11693278#L2826-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 11693271#L2837-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 11693270#L2848-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 11693245#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 11694013#L244-89 assume !(0 == isFloorCalling_~floorID); 11694012#L248-89 assume !(1 == isFloorCalling_~floorID); 11694005#L252-89 assume !(2 == isFloorCalling_~floorID); 11694003#L256-89 assume !(3 == isFloorCalling_~floorID); 11694002#L260-89 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 11694001#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 11694000#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 11693999#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 11693998#L1195-54 assume !(1 == buttonForFloorIsPressed_~floorID); 11693996#L1199-54 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 11693994#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 11693992#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 11693991#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 11693989#L1938-4 assume !(0 != timeShift_~tmp___9~2); 11693828#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 11693823#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 11693821#L1378-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 11693818#L818-20 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 11693749#L1382-8 assume !(0 != stopRequestedInDirection_~tmp~5); 11693751#L1388-8 assume !(~currentFloorID~0 < 0); 11694126#L1403-8 assume !(~currentFloorID~0 < 0); 11694124#L1416-8 assume !(~currentFloorID~0 < 1); 11694123#L1432-8 assume !(~currentFloorID~0 < 1); 11694121#L1445-8 assume !(~currentFloorID~0 < 2); 11693852#L1461-8 assume ~currentFloorID~0 < 2; 11693853#L1463-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 11707019#L1464-8 assume 0 != ~floorButtons_2~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 11707014#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 11706988#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 11706989#L1754-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 11706972#L818-21 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 11706973#L1758-36 assume !(0 != continueInDirection_~tmp~6); 11706611#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 11706608#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 11706605#L2935-4 assume !(-1 == ~expectedDirection~0); 11706603#L2947-4 assume !(1 == ~expectedDirection~0); 11706531#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 11706530#L2576-2 [2018-12-08 08:11:07,672 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:11:07,672 INFO L82 PathProgramCache]: Analyzing trace with hash -1224643386, now seen corresponding path program 2 times [2018-12-08 08:11:07,672 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:11:07,672 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:11:07,673 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:07,673 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:11:07,673 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:07,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:11:07,708 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:11:07,708 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:11:07,708 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 08:11:07,709 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:11:07,709 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:11:07,709 INFO L82 PathProgramCache]: Analyzing trace with hash -1329130438, now seen corresponding path program 1 times [2018-12-08 08:11:07,709 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:11:07,709 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:11:07,709 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:07,709 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-08 08:11:07,710 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:07,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:11:07,727 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:11:07,727 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:11:07,727 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 08:11:07,727 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:11:07,727 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 08:11:07,727 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 08:11:07,727 INFO L87 Difference]: Start difference. First operand 345628 states and 640302 transitions. cyclomatic complexity: 294693 Second operand 5 states. [2018-12-08 08:11:15,803 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:11:15,803 INFO L93 Difference]: Finished difference Result 678622 states and 1247296 transitions. [2018-12-08 08:11:15,804 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-12-08 08:11:15,804 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 678622 states and 1247296 transitions. [2018-12-08 08:11:17,658 INFO L131 ngComponentsAnalysis]: Automaton has 17 accepting balls. 186697 [2018-12-08 08:11:19,017 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 678622 states to 678622 states and 1247296 transitions. [2018-12-08 08:11:19,017 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 650147 [2018-12-08 08:11:19,324 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 650147 [2018-12-08 08:11:19,324 INFO L73 IsDeterministic]: Start isDeterministic. Operand 678622 states and 1247296 transitions. [2018-12-08 08:11:19,459 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-12-08 08:11:19,459 INFO L705 BuchiCegarLoop]: Abstraction has 678622 states and 1247296 transitions. [2018-12-08 08:11:19,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 678622 states and 1247296 transitions. [2018-12-08 08:11:22,886 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 678622 to 358498. [2018-12-08 08:11:22,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 358498 states. [2018-12-08 08:11:23,322 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 358498 states to 358498 states and 663892 transitions. [2018-12-08 08:11:23,322 INFO L728 BuchiCegarLoop]: Abstraction has 358498 states and 663892 transitions. [2018-12-08 08:11:23,322 INFO L608 BuchiCegarLoop]: Abstraction has 358498 states and 663892 transitions. [2018-12-08 08:11:23,322 INFO L442 BuchiCegarLoop]: ======== Iteration 25============ [2018-12-08 08:11:23,322 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 358498 states and 663892 transitions. [2018-12-08 08:11:23,944 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 96468 [2018-12-08 08:11:23,944 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:11:23,944 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:11:23,946 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:11:23,946 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:11:23,946 INFO L794 eck$LassoCheckResult]: Stem: 12522549#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 12522550#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 12520627#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 12520194#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 12520195#L2767 assume 0 != main_~tmp~19; 12522912#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 12521004#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 12519435#L868 assume !(0 == getOrigin_~person); 12519359#L872 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 12519360#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 12524639#L515 assume 0 == initPersonOnFloor_~floor; 12519425#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 12517415#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 12520531#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 12520532#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 12523215#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 12523216#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 12519863#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 12519864#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 12520492#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 12520493#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 12521461#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 12519681#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 12563642#L244 assume !(0 == isFloorCalling_~floorID); 12563641#L248 assume !(1 == isFloorCalling_~floorID); 12563640#L252 assume !(2 == isFloorCalling_~floorID); 12563639#L256 assume !(3 == isFloorCalling_~floorID); 12563638#L260 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~0 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 12563637#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 12563636#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 12563635#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 12563634#L1195-10 assume !(1 == buttonForFloorIsPressed_~floorID); 12563633#L1199-10 assume !(2 == buttonForFloorIsPressed_~floorID); 12563631#L1203-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 12563630#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 12563628#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 12563627#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 12563625#L1938 assume !(0 != timeShift_~tmp___9~2); 12563624#L2029 assume !(1 == ~doorState~0); 12563623#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 12563621#L1378 assume !(1 == stopRequestedInDirection_~dir); 12563620#L1547 assume !(0 == ~currentFloorID~0); 12563619#L1553 assume ~currentFloorID~0 > 0; 12563616#L1554 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 12563617#L244-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 12563618#L271-6 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 12563614#L1558 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 12563615#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 12564304#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 12564305#L1754 assume !(1 == ~currentHeading~0); 12574858#L1764 assume !(0 == ~currentFloorID~0); 12536922#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 12536923#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 12536916#L2935 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 12536917#L1226-1 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 12574796#L2939 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 12536839#L2947 assume !(1 == ~expectedDirection~0); 12536840#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 12536834#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 12536835#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 12536830#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 12536831#L2866-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 12574790#L1191-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 12585562#L1212-16 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 12585558#L2870-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 12585559#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 12595650#L244-21 assume !(0 == isFloorCalling_~floorID); 12595651#L248-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 12595638#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 12595639#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 12595654#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 12595655#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 12595640#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 12595641#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 12595629#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 12595630#L1938-1 assume !(0 != timeShift_~tmp___9~2); 12665244#L2029-3 assume !(1 == ~doorState~0); 12665243#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 12665240#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 12665241#L1547-2 assume !(0 == ~currentFloorID~0); 12681730#L1553-2 assume ~currentFloorID~0 > 0; 12681727#L1554-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 12681728#L244-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 12681955#L271-27 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 12681682#L1558-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 12681667#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 12681273#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 12681271#L1754-3 assume !(1 == ~currentHeading~0); 12681022#L1764-9 assume !(0 == ~currentFloorID~0); 12608278#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 12574342#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 12574343#L2935-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 12574336#L1226-4 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 12574337#L2939-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 12564442#L2947-1 assume !(1 == ~expectedDirection~0); 12564443#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 12564381#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 12564382#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 12564211#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 12564212#L2866-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 12608252#L1191-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 12608248#L1212-27 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 12608249#L2870-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 12628980#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 12608242#L244-42 assume !(0 == isFloorCalling_~floorID); 12608243#L248-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 12608234#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 12608230#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 12608232#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 12608240#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 12608235#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 12608233#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 12608228#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 12608229#L1938-2 assume !(0 != timeShift_~tmp___9~2); 12711135#L2029-6 assume !(1 == ~doorState~0); 12711134#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 12711132#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 12711133#L1547-4 assume !(0 == ~currentFloorID~0); 12711324#L1553-4 assume ~currentFloorID~0 > 0; 12711322#L1554-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 12711323#L244-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 12712861#L271-48 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 12711200#L1558-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 12685100#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 12685034#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 12685027#L1754-6 assume !(1 == ~currentHeading~0); 12685011#L1764-18 assume !(0 == ~currentFloorID~0); 12684318#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 12573827#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 12573828#L2935-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 12573820#L1226-7 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 12573821#L2939-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 12572584#L2947-2 assume !(1 == ~expectedDirection~0); 12572585#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 12572579#L868-1 assume !(0 == getOrigin_~person); 12572581#L872-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 12684308#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 12684307#L515-1 assume 0 == initPersonOnFloor_~floor; 12572535#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 12572519#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 12564571#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 12550125#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 12550115#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 12550116#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 12550109#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 12550110#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 12684266#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 12684265#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 12684263#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 12684264#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 12716520#L244-63 assume !(0 == isFloorCalling_~floorID); 12716521#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 12716515#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 12716513#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 12716512#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 12716505#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 12716506#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 12729528#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 12729529#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 12729520#L1938-3 assume !(0 != timeShift_~tmp___9~2); 12716236#L2029-9 assume !(1 == ~doorState~0); 12716234#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 12716230#L1378-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 12716231#L818-15 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 12716242#L1382-6 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 12716133#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 12717459#L2037-3 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 12717442#L1809-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~17 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 12717437#L1814-6 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 12717438#L1378-7 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 12717624#L818-17 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 12717623#L1382-7 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 12519699#L1700-7 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 12824257#L2046-3 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 12824256#L1809-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 12823866#L1814-7 timeShift_#t~ret49 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 12823864#L1754-10 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 12823861#L818-18 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 12823859#L1758-30 assume !(0 != continueInDirection_~tmp~6); 12717452#L1764-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 12841865#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 12841864#L2935-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 12841794#L1226-10 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 12841862#L2939-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 12841786#L2947-3 assume !(1 == ~expectedDirection~0); 12841782#L2948-3 cleanup_~i~3 := 0; 12841780#L2576-2 [2018-12-08 08:11:23,955 INFO L796 eck$LassoCheckResult]: Loop: 12841780#L2576-2 assume !false; 12841779#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 12841778#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 12841777#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 12841776#L2584 assume 1 != cleanup_~tmp___0~8; 12841775#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 12841774#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 12841746#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 12841669#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 12841667#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 12841665#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 12841663#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 12841661#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 12841659#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 12841657#L2804-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 12838492#L2805-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 12838450#L2815-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 12838449#L2826-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2;buttonForFloorIsPressed_#in~floorID := 2;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 12859080#L1191-46 assume !(0 == buttonForFloorIsPressed_~floorID); 12859077#L1195-46 assume !(1 == buttonForFloorIsPressed_~floorID); 12859074#L1199-46 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 12859069#L1212-46 __utac_acc__Specification3_spec__1_#t~ret116 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___2~6 := __utac_acc__Specification3_spec__1_#t~ret116;havoc __utac_acc__Specification3_spec__1_#t~ret116; 12859065#L2831-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___2~6;~expectedDirection~0 := 1; 12855744#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 12855704#L244-89 assume !(0 == isFloorCalling_~floorID); 12855698#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 12855697#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 12855690#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 12855691#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 12855694#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 12855692#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 12855688#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 12855689#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 12862555#L1938-4 assume !(0 != timeShift_~tmp___9~2); 12862552#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 12862551#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 12862550#L1378-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 12862549#L818-20 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 12862547#L1382-8 assume !(0 != stopRequestedInDirection_~tmp~5); 12862548#L1388-8 assume !(~currentFloorID~0 < 0); 12870106#L1403-8 assume !(~currentFloorID~0 < 0); 12870105#L1416-8 assume !(~currentFloorID~0 < 1); 12838655#L1432-8 assume !(~currentFloorID~0 < 1); 12838667#L1445-8 assume ~currentFloorID~0 < 2; 12852225#L1447-8 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 12852172#L1461-8 assume ~currentFloorID~0 < 2; 12852292#L1463-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 12852173#L1464-8 assume 0 != ~floorButtons_2~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 12852167#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 12852168#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 12824578#L1754-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 12824575#L818-21 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 12824576#L1758-36 assume !(0 != continueInDirection_~tmp~6); 12725465#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 12841795#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 12841791#L2935-4 assume !(-1 == ~expectedDirection~0); 12841789#L2947-4 assume !(1 == ~expectedDirection~0); 12841781#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 12841780#L2576-2 [2018-12-08 08:11:23,968 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:11:23,968 INFO L82 PathProgramCache]: Analyzing trace with hash -1906260690, now seen corresponding path program 1 times [2018-12-08 08:11:23,968 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:11:23,968 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:11:23,968 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:23,968 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:11:23,968 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:23,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:11:23,994 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:11:23,994 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:11:23,994 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 08:11:23,995 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:11:23,995 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:11:23,995 INFO L82 PathProgramCache]: Analyzing trace with hash -1273595031, now seen corresponding path program 1 times [2018-12-08 08:11:23,995 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:11:23,995 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:11:23,995 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:23,995 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:11:23,995 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:23,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:11:24,007 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:11:24,007 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:11:24,007 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 08:11:24,007 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:11:24,007 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 08:11:24,008 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 08:11:24,008 INFO L87 Difference]: Start difference. First operand 358498 states and 663892 transitions. cyclomatic complexity: 305413 Second operand 5 states. [2018-12-08 08:11:25,524 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:11:25,524 INFO L93 Difference]: Finished difference Result 407106 states and 753844 transitions. [2018-12-08 08:11:25,524 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-08 08:11:25,525 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 407106 states and 753844 transitions. [2018-12-08 08:11:27,048 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 109312 [2018-12-08 08:11:27,801 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 407106 states to 407106 states and 753844 transitions. [2018-12-08 08:11:27,801 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 392280 [2018-12-08 08:11:27,988 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 392280 [2018-12-08 08:11:27,988 INFO L73 IsDeterministic]: Start isDeterministic. Operand 407106 states and 753844 transitions. [2018-12-08 08:11:28,069 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-12-08 08:11:28,069 INFO L705 BuchiCegarLoop]: Abstraction has 407106 states and 753844 transitions. [2018-12-08 08:11:28,235 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 407106 states and 753844 transitions. [2018-12-08 08:11:30,553 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 407106 to 358498. [2018-12-08 08:11:30,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 358498 states. [2018-12-08 08:11:30,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 358498 states to 358498 states and 662476 transitions. [2018-12-08 08:11:30,992 INFO L728 BuchiCegarLoop]: Abstraction has 358498 states and 662476 transitions. [2018-12-08 08:11:30,992 INFO L608 BuchiCegarLoop]: Abstraction has 358498 states and 662476 transitions. [2018-12-08 08:11:30,992 INFO L442 BuchiCegarLoop]: ======== Iteration 26============ [2018-12-08 08:11:30,992 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 358498 states and 662476 transitions. [2018-12-08 08:11:31,766 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 96468 [2018-12-08 08:11:31,766 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:11:31,766 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:11:31,768 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:11:31,768 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:11:31,769 INFO L794 eck$LassoCheckResult]: Stem: 13288013#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 13288014#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 13286183#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 13285738#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 13285739#L2767 assume 0 != main_~tmp~19; 13288384#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 13286553#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 13285003#L868 assume !(0 == getOrigin_~person); 13284931#L872 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 13284932#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 13289935#L515 assume 0 == initPersonOnFloor_~floor; 13284993#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 13283037#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 13286084#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 13286085#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 13288673#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 13288674#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 13285413#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 13285414#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 13286046#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 13286047#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 13286972#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 13283923#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 13302423#L244 assume !(0 == isFloorCalling_~floorID); 13302422#L248 assume !(1 == isFloorCalling_~floorID); 13302421#L252 assume !(2 == isFloorCalling_~floorID); 13302420#L256 assume !(3 == isFloorCalling_~floorID); 13302419#L260 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~0 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 13302418#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 13302417#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 13302416#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 13302415#L1195-10 assume !(1 == buttonForFloorIsPressed_~floorID); 13302414#L1199-10 assume !(2 == buttonForFloorIsPressed_~floorID); 13302412#L1203-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 13302411#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 13302409#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 13302408#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 13302406#L1938 assume !(0 != timeShift_~tmp___9~2); 13302405#L2029 assume !(1 == ~doorState~0); 13302404#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 13302402#L1378 assume !(1 == stopRequestedInDirection_~dir); 13302401#L1547 assume !(0 == ~currentFloorID~0); 13302400#L1553 assume ~currentFloorID~0 > 0; 13302399#L1554 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 13302398#L244-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 13302397#L271-6 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 13302395#L1558 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 13302396#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 13302761#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 13302432#L1754 assume !(1 == ~currentHeading~0); 13302433#L1764 assume !(0 == ~currentFloorID~0); 13302261#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 13302262#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 13302218#L2935 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 13301382#L1226-1 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 13302012#L2939 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 13302013#L2947 assume !(1 == ~expectedDirection~0); 13301364#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 13301365#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 13301353#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 13301354#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 13301343#L2866-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 13301344#L1191-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 13370628#L1212-16 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 13370629#L2870-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 13377690#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 13377688#L244-21 assume !(0 == isFloorCalling_~floorID); 13377684#L248-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 13377682#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 13377680#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 13377678#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 13377672#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 13377668#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 13377664#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 13377662#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 13377659#L1938-1 assume !(0 != timeShift_~tmp___9~2); 13323788#L2029-3 assume !(1 == ~doorState~0); 13319748#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 13319746#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 13319747#L1547-2 assume !(0 == ~currentFloorID~0); 13320188#L1553-2 assume ~currentFloorID~0 > 0; 13320186#L1554-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 13319971#L244-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 13319964#L271-27 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 13319709#L1558-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 13319691#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 13319689#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 13319690#L1754-3 assume !(1 == ~currentHeading~0); 13400559#L1764-9 assume !(0 == ~currentFloorID~0); 13319092#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 13319087#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 13319088#L2935-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 13319081#L1226-4 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 13319082#L2939-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 13311634#L2947-1 assume !(1 == ~expectedDirection~0); 13311635#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 13311625#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 13311626#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 13311617#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 13311618#L2866-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 13400523#L1191-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 13409453#L1212-27 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 13409451#L2870-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 13409450#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 13409449#L244-42 assume !(0 == isFloorCalling_~floorID); 13409448#L248-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 13400380#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 13400376#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 13400377#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 13400383#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 13400379#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 13400378#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 13400375#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 13400372#L1938-2 assume !(0 != timeShift_~tmp___9~2); 13337023#L2029-6 assume !(1 == ~doorState~0); 13337021#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 13337019#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 13337020#L1547-4 assume !(0 == ~currentFloorID~0); 13337141#L1553-4 assume ~currentFloorID~0 > 0; 13337138#L1554-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 13337132#L244-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 13337126#L271-48 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 13337118#L1558-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 13336953#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 13336954#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 13337111#L1754-6 assume !(1 == ~currentHeading~0); 13421201#L1764-18 assume !(0 == ~currentFloorID~0); 13421194#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 13421192#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 13421191#L2935-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 13421189#L1226-7 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 13421188#L2939-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 13421186#L2947-2 assume !(1 == ~expectedDirection~0); 13421183#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 13421181#L868-1 assume !(0 == getOrigin_~person); 13421182#L872-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 13421233#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 13421232#L515-1 assume 0 == initPersonOnFloor_~floor; 13421160#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 13421143#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 13421138#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 13310210#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 13421132#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 13421130#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 13421128#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 13421126#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 13421124#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 13421122#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 13421119#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 13421120#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 13477440#L244-63 assume !(0 == isFloorCalling_~floorID); 13477441#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 13467678#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 13467676#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 13467675#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 13466796#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 13466797#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 13553847#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 13553841#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 13553839#L1938-3 assume !(0 != timeShift_~tmp___9~2); 13354684#L2029-9 assume !(1 == ~doorState~0); 13354670#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 13354668#L1378-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 13354669#L818-15 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 13370289#L1382-6 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 13289756#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 13370801#L2037-3 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 13285616#L1809-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~17 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 13285617#L1814-6 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 13371214#L1378-7 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 13371215#L818-17 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 13442761#L1382-7 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 13285259#L1700-7 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 13557621#L2046-3 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 13557620#L1809-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 13557619#L1814-7 timeShift_#t~ret49 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 13557618#L1754-10 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 13557617#L818-18 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 13557616#L1758-30 assume !(0 != continueInDirection_~tmp~6); 13289450#L1764-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 13493255#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 13493247#L2935-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 13493240#L1226-10 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 13493238#L2939-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 13493228#L2947-3 assume !(1 == ~expectedDirection~0); 13493224#L2948-3 cleanup_~i~3 := 0; 13493220#L2576-2 [2018-12-08 08:11:31,778 INFO L796 eck$LassoCheckResult]: Loop: 13493220#L2576-2 assume !false; 13493217#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 13493214#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 13493211#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 13493210#L2584 assume 1 != cleanup_~tmp___0~8; 13493209#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 13493208#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 13493207#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 13493206#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 13493205#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 13493204#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 13493203#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 13493202#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 13493201#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 13493200#L2804-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 13493196#L2805-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 13489812#L2815-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 13489808#L2826-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 13489802#L2837-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 13489801#L2848-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 13489777#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 13493066#L244-89 assume !(0 == isFloorCalling_~floorID); 13493065#L248-89 assume !(1 == isFloorCalling_~floorID); 13493063#L252-89 assume !(2 == isFloorCalling_~floorID); 13489752#L256-89 assume !(3 == isFloorCalling_~floorID); 13493059#L260-89 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 13493057#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 13493053#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 13493055#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 13493064#L1195-54 assume !(1 == buttonForFloorIsPressed_~floorID); 13493062#L1199-54 assume !(2 == buttonForFloorIsPressed_~floorID); 13493061#L1203-54 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 13493058#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 13493056#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 13493051#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 13493052#L1938-4 assume !(0 != timeShift_~tmp___9~2); 13493433#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 13493418#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 13493415#L1378-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 13493413#L818-20 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 13493406#L1382-8 assume !(0 != stopRequestedInDirection_~tmp~5); 13493404#L1388-8 assume !(~currentFloorID~0 < 0); 13493400#L1403-8 assume !(~currentFloorID~0 < 0); 13493397#L1416-8 assume !(~currentFloorID~0 < 1); 13493394#L1432-8 assume !(~currentFloorID~0 < 1); 13493386#L1445-8 assume !(~currentFloorID~0 < 2); 13493387#L1461-8 assume ~currentFloorID~0 < 2; 13493305#L1463-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 13493292#L1464-8 assume 0 != ~floorButtons_2~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 13493293#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 13493276#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 13493269#L1754-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 13493262#L818-21 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 13493251#L1758-36 assume !(0 != continueInDirection_~tmp~6); 13493245#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 13493241#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 13493236#L2935-4 assume !(-1 == ~expectedDirection~0); 13493231#L2947-4 assume !(1 == ~expectedDirection~0); 13493223#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 13493220#L2576-2 [2018-12-08 08:11:31,789 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:11:31,789 INFO L82 PathProgramCache]: Analyzing trace with hash -1906260690, now seen corresponding path program 2 times [2018-12-08 08:11:31,789 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:11:31,789 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:11:31,789 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:31,790 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:11:31,790 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:31,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:11:31,832 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:11:31,832 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:11:31,832 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 08:11:31,832 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:11:31,832 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:11:31,833 INFO L82 PathProgramCache]: Analyzing trace with hash 880688423, now seen corresponding path program 1 times [2018-12-08 08:11:31,833 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:11:31,833 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:11:31,833 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:31,833 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-08 08:11:31,833 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:31,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:11:31,856 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:11:31,856 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:11:31,856 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 08:11:31,857 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:11:31,857 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 08:11:31,857 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 08:11:31,857 INFO L87 Difference]: Start difference. First operand 358498 states and 662476 transitions. cyclomatic complexity: 303997 Second operand 5 states. [2018-12-08 08:11:36,412 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:11:36,413 INFO L93 Difference]: Finished difference Result 650709 states and 1191878 transitions. [2018-12-08 08:11:36,413 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-12-08 08:11:36,413 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 650709 states and 1191878 transitions. [2018-12-08 08:11:38,445 INFO L131 ngComponentsAnalysis]: Automaton has 17 accepting balls. 177775 [2018-12-08 08:11:39,961 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 650709 states to 650709 states and 1191878 transitions. [2018-12-08 08:11:39,961 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 622458 [2018-12-08 08:11:40,186 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 622458 [2018-12-08 08:11:40,186 INFO L73 IsDeterministic]: Start isDeterministic. Operand 650709 states and 1191878 transitions. [2018-12-08 08:11:40,263 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-12-08 08:11:40,263 INFO L705 BuchiCegarLoop]: Abstraction has 650709 states and 1191878 transitions. [2018-12-08 08:11:40,502 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 650709 states and 1191878 transitions. [2018-12-08 08:11:47,873 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 650709 to 338994. [2018-12-08 08:11:47,873 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 338994 states. [2018-12-08 08:11:48,288 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 338994 states to 338994 states and 625138 transitions. [2018-12-08 08:11:48,288 INFO L728 BuchiCegarLoop]: Abstraction has 338994 states and 625138 transitions. [2018-12-08 08:11:48,288 INFO L608 BuchiCegarLoop]: Abstraction has 338994 states and 625138 transitions. [2018-12-08 08:11:48,288 INFO L442 BuchiCegarLoop]: ======== Iteration 27============ [2018-12-08 08:11:48,288 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 338994 states and 625138 transitions. [2018-12-08 08:11:49,096 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 90020 [2018-12-08 08:11:49,096 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:11:49,096 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:11:49,099 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:11:49,099 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:11:49,099 INFO L794 eck$LassoCheckResult]: Stem: 14297414#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 14297415#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 14295495#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 14295049#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 14295050#L2767 assume 0 != main_~tmp~19; 14297782#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 14295880#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 14294260#L868 assume !(0 == getOrigin_~person); 14294185#L872 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 14294186#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 14299528#L515 assume 0 == initPersonOnFloor_~floor; 14294250#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 14292267#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 14295394#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 14295395#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 14298087#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 14298088#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 14294718#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 14294719#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 14295355#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 14295356#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 14296337#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 14296338#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 14319576#L244 assume !(0 == isFloorCalling_~floorID); 14319538#L248 assume !(1 == isFloorCalling_~floorID); 14319537#L252 assume !(2 == isFloorCalling_~floorID); 14319534#L256 assume !(3 == isFloorCalling_~floorID); 14319531#L260 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~0 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 14319523#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 14317961#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 14317960#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 14317959#L1195-10 assume !(1 == buttonForFloorIsPressed_~floorID); 14317958#L1199-10 assume !(2 == buttonForFloorIsPressed_~floorID); 14317957#L1203-10 assume !(3 == buttonForFloorIsPressed_~floorID); 14317956#L1207-10 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~9 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 14317955#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 14317948#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 14317946#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 14317938#L1938 assume !(0 != timeShift_~tmp___9~2); 14317937#L2029 assume !(1 == ~doorState~0); 14317936#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 14317935#L1378 assume !(1 == stopRequestedInDirection_~dir); 14317675#L1547 assume !(0 == ~currentFloorID~0); 14317092#L1553 assume ~currentFloorID~0 > 0; 14317091#L1554 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 14317090#L244-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 14317089#L271-6 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 14317088#L1558 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 14294619#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 14343784#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 14344638#L1754 assume !(1 == ~currentHeading~0); 14344303#L1764 assume !(0 == ~currentFloorID~0); 14344304#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 14348652#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 14348651#L2935 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 14316019#L1226-1 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 14316050#L2939 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 14316051#L2947 assume !(1 == ~expectedDirection~0); 14316000#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 14316001#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 14315976#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 14315977#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 14315434#L2866-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 14315435#L1191-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 14402601#L1212-16 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 14402598#L2870-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 14402597#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 14402596#L244-21 assume !(0 == isFloorCalling_~floorID); 14402591#L248-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 14402589#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 14402240#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 14402242#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 14402594#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 14402590#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 14402243#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 14402238#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 14402239#L1938-1 assume !(0 != timeShift_~tmp___9~2); 14425527#L2029-3 assume !(1 == ~doorState~0); 14425525#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 14425522#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 14425517#L1547-2 assume !(0 == ~currentFloorID~0); 14425513#L1553-2 assume ~currentFloorID~0 > 0; 14425509#L1554-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 14425503#L244-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 14425495#L271-27 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 14425460#L1558-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 14425442#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 14425440#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 14425439#L1754-3 assume !(1 == ~currentHeading~0); 14425324#L1764-9 assume !(0 == ~currentFloorID~0); 14399458#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 14345349#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 14345350#L2935-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 14336451#L1226-4 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 14345335#L2939-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 14322064#L2947-1 assume !(1 == ~expectedDirection~0); 14322061#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 14322058#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 14322056#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 14320488#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 14320489#L2866-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 14399355#L1191-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 14399342#L1212-27 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 14399343#L2870-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 14411754#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 14396141#L244-42 assume !(0 == isFloorCalling_~floorID); 14396142#L248-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 14396123#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 14396119#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 14396121#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 14396128#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 14396124#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 14396122#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 14396076#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 14396077#L1938-2 assume !(0 != timeShift_~tmp___9~2); 14479571#L2029-6 assume !(1 == ~doorState~0); 14479570#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 14479568#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 14479569#L1547-4 assume !(0 == ~currentFloorID~0); 14480157#L1553-4 assume ~currentFloorID~0 > 0; 14480156#L1554-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 14480155#L244-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 14480154#L271-48 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 14480153#L1558-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 14292436#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 14510645#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 14293525#L1754-6 assume !(1 == ~currentHeading~0); 14293526#L1764-18 assume !(0 == ~currentFloorID~0); 14298524#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 14348316#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 14348313#L2935-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 14348112#L1226-7 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 14348309#L2939-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 14348310#L2947-2 assume !(1 == ~expectedDirection~0); 14345643#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 14345644#L868-1 assume !(0 == getOrigin_~person); 14479139#L872-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 14479134#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 14479133#L515-1 assume 0 == initPersonOnFloor_~floor; 14345479#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 14345463#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 14345442#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 14344703#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 14345431#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 14345432#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 14479101#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 14479099#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 14479097#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 14479095#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 14479092#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 14479093#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 14484364#L244-63 assume !(0 == isFloorCalling_~floorID); 14484365#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 14484353#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 14484350#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 14484348#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 14484339#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 14484340#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 14532516#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 14532514#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 14532511#L1938-3 assume !(0 != timeShift_~tmp___9~2); 14484274#L2029-9 assume !(1 == ~doorState~0); 14484273#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 14484271#L1378-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 14484272#L818-15 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 14484313#L1382-6 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 14297017#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 14485645#L2037-3 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 14485642#L1809-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~17 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 14485636#L1814-6 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 14485633#L1378-7 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 14485528#L818-17 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 14485414#L1382-7 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 14485382#L1700-7 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 14630301#L2046-3 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 14630300#L1809-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 14630299#L1814-7 timeShift_#t~ret49 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 14630298#L1754-10 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 14630297#L818-18 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 14630296#L1758-30 assume !(0 != continueInDirection_~tmp~6); 14485356#L1764-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 14511507#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 14511497#L2935-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 14511480#L1226-10 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 14511481#L2939-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 14511456#L2947-3 assume !(1 == ~expectedDirection~0); 14511455#L2948-3 cleanup_~i~3 := 0; 14511446#L2576-2 [2018-12-08 08:11:49,107 INFO L796 eck$LassoCheckResult]: Loop: 14511446#L2576-2 assume !false; 14511447#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 14511442#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 14511443#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 14511438#L2584 assume 1 != cleanup_~tmp___0~8; 14511439#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 14511434#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 14511435#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 14511430#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 14511431#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 14511426#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 14511427#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 14511417#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 14511418#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 14511397#L2804-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 14511398#L2805-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 14511364#L2815-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 14502083#L2826-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 14514774#L2837-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 14514760#L2848-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 14514761#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 14521144#L244-89 assume !(0 == isFloorCalling_~floorID); 14521143#L248-89 assume !(1 == isFloorCalling_~floorID); 14521142#L252-89 assume !(2 == isFloorCalling_~floorID); 14514766#L256-89 assume !(3 == isFloorCalling_~floorID); 14514748#L260-89 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 14514772#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 14514771#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 14514770#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 14514769#L1195-54 assume !(1 == buttonForFloorIsPressed_~floorID); 14514768#L1199-54 assume !(2 == buttonForFloorIsPressed_~floorID); 14514767#L1203-54 assume !(3 == buttonForFloorIsPressed_~floorID); 14514730#L1207-54 assume 4 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_4~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 14514728#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 14514658#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 14511465#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 14511302#L1938-4 assume !(0 != timeShift_~tmp___9~2); 14511301#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 14511300#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 14511299#L1378-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 14511298#L818-20 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 14511297#L1382-8 assume !(0 != stopRequestedInDirection_~tmp~5); 14511296#L1388-8 assume !(~currentFloorID~0 < 0); 14511295#L1403-8 assume !(~currentFloorID~0 < 0); 14511293#L1416-8 assume !(~currentFloorID~0 < 1); 14511291#L1432-8 assume !(~currentFloorID~0 < 1); 14511292#L1445-8 assume !(~currentFloorID~0 < 2); 14511304#L1461-8 assume ~currentFloorID~0 < 2; 14511270#L1463-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 14511011#L1464-8 assume 0 != ~floorButtons_2~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 14511009#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 14527705#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 14527706#L1754-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 14551087#L818-21 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 14551020#L1758-36 assume !(0 != continueInDirection_~tmp~6); 14511491#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 14511479#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 14511471#L2935-4 assume !(-1 == ~expectedDirection~0); 14511461#L2947-4 assume !(1 == ~expectedDirection~0); 14511452#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 14511446#L2576-2 [2018-12-08 08:11:49,118 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:11:49,118 INFO L82 PathProgramCache]: Analyzing trace with hash 2110203085, now seen corresponding path program 1 times [2018-12-08 08:11:49,118 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:11:49,118 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:11:49,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:49,118 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:11:49,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:49,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:11:49,160 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:11:49,161 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:11:49,161 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 08:11:49,161 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:11:49,161 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:11:49,161 INFO L82 PathProgramCache]: Analyzing trace with hash -608086347, now seen corresponding path program 1 times [2018-12-08 08:11:49,161 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:11:49,161 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:11:49,162 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:49,162 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:11:49,162 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:49,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:11:49,177 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:11:49,177 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:11:49,177 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 08:11:49,177 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:11:49,178 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-08 08:11:49,178 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-08 08:11:49,178 INFO L87 Difference]: Start difference. First operand 338994 states and 625138 transitions. cyclomatic complexity: 286163 Second operand 3 states. [2018-12-08 08:11:50,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:11:50,863 INFO L93 Difference]: Finished difference Result 444133 states and 819805 transitions. [2018-12-08 08:11:50,863 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-08 08:11:50,863 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 444133 states and 819805 transitions. [2018-12-08 08:11:52,440 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 120103 [2018-12-08 08:11:53,340 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 444133 states to 443617 states and 819245 transitions. [2018-12-08 08:11:53,340 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 428851 [2018-12-08 08:11:54,177 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 428851 [2018-12-08 08:11:54,178 INFO L73 IsDeterministic]: Start isDeterministic. Operand 443617 states and 819245 transitions. [2018-12-08 08:11:54,227 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-12-08 08:11:54,227 INFO L705 BuchiCegarLoop]: Abstraction has 443617 states and 819245 transitions. [2018-12-08 08:11:54,373 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 443617 states and 819245 transitions. [2018-12-08 08:11:56,713 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 443617 to 442843. [2018-12-08 08:11:56,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 442843 states. [2018-12-08 08:11:57,301 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 442843 states to 442843 states and 818467 transitions. [2018-12-08 08:11:57,301 INFO L728 BuchiCegarLoop]: Abstraction has 442843 states and 818467 transitions. [2018-12-08 08:11:57,301 INFO L608 BuchiCegarLoop]: Abstraction has 442843 states and 818467 transitions. [2018-12-08 08:11:57,301 INFO L442 BuchiCegarLoop]: ======== Iteration 28============ [2018-12-08 08:11:57,301 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 442843 states and 818467 transitions. [2018-12-08 08:11:58,360 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 120014 [2018-12-08 08:11:58,361 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:11:58,361 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:11:58,362 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:11:58,362 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:11:58,363 INFO L794 eck$LassoCheckResult]: Stem: 15080318#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 15080319#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 15078491#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 15078072#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 15078073#L2767 assume 0 != main_~tmp~19; 15080679#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 15078861#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 15077360#L868 assume !(0 == getOrigin_~person); 15077294#L872 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 15077295#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 15082255#L515 assume 0 == initPersonOnFloor_~floor; 15077351#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 15075398#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 15078393#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 15078394#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 15118997#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 15118995#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 15118993#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 15118991#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 15118989#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 15118987#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 15118984#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 15118985#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 15119300#L244 assume !(0 == isFloorCalling_~floorID); 15119298#L248 assume !(1 == isFloorCalling_~floorID); 15119296#L252 assume !(2 == isFloorCalling_~floorID); 15119295#L256 assume !(3 == isFloorCalling_~floorID); 15119294#L260 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~0 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 15119293#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 15119291#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 15119289#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 15119287#L1195-10 assume !(1 == buttonForFloorIsPressed_~floorID); 15119285#L1199-10 assume !(2 == buttonForFloorIsPressed_~floorID); 15119283#L1203-10 assume !(3 == buttonForFloorIsPressed_~floorID); 15119281#L1207-10 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~9 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 15119279#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 15119276#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 15119274#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 15119271#L1938 assume !(0 != timeShift_~tmp___9~2); 15119269#L2029 assume !(1 == ~doorState~0); 15119267#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 15119263#L1378 assume !(1 == stopRequestedInDirection_~dir); 15119261#L1547 assume !(0 == ~currentFloorID~0); 15119259#L1553 assume ~currentFloorID~0 > 0; 15119257#L1554 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 15119256#L244-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 15119254#L271-6 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 15119203#L1558 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 15119197#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 15119192#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 15119188#L1754 assume !(1 == ~currentHeading~0); 15119183#L1764 assume !(0 == ~currentFloorID~0); 15119180#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 15119179#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 15119177#L2935 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 15119178#L1226-1 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 15221746#L2939 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 15221724#L2947 assume !(1 == ~expectedDirection~0); 15221722#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 15221720#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 15221718#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 15221715#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 15221711#L2866-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 15221709#L1191-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 15221707#L1212-16 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 15221705#L2870-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 15221703#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 15221702#L244-21 assume !(0 == isFloorCalling_~floorID); 15221700#L248-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 15221699#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 15221584#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 15221585#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 15221592#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 15221588#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 15221586#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 15221587#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 15222021#L1938-1 assume !(0 != timeShift_~tmp___9~2); 15222017#L2029-3 assume !(1 == ~doorState~0); 15222016#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 15222014#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 15222013#L1547-2 assume !(0 == ~currentFloorID~0); 15222012#L1553-2 assume ~currentFloorID~0 > 0; 15222010#L1554-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 15222008#L244-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 15222007#L271-27 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 15222003#L1558-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 15222004#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 15223226#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 15223220#L1754-3 assume !(1 == ~currentHeading~0); 15223218#L1764-9 assume !(0 == ~currentFloorID~0); 15223215#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 15223213#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 15223212#L2935-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 15223131#L1226-4 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 15223211#L2939-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 15223125#L2947-1 assume !(1 == ~expectedDirection~0); 15223123#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 15223122#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 15223120#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 15223090#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 15223088#L2866-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 15223084#L1191-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 15223081#L1212-27 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 15223077#L2870-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 15223078#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 15233810#L244-42 assume !(0 == isFloorCalling_~floorID); 15233808#L248-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 15233805#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 15233685#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 15233686#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 15233833#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 15233830#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 15233687#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 15233688#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 15277311#L1938-2 assume !(0 != timeShift_~tmp___9~2); 15277306#L2029-6 assume !(1 == ~doorState~0); 15277303#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 15277300#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 15277301#L1547-4 assume !(0 == ~currentFloorID~0); 15279891#L1553-4 assume ~currentFloorID~0 > 0; 15279890#L1554-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 15279889#L244-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 15279888#L271-48 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 15279886#L1558-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 15279885#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 15278364#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 15278365#L1754-6 assume !(1 == ~currentHeading~0); 15271318#L1764-18 assume !(0 == ~currentFloorID~0); 15271319#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 15279650#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 15279648#L2935-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 15279634#L1226-7 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 15279645#L2939-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 15279629#L2947-2 assume !(1 == ~expectedDirection~0); 15279628#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 15279626#L868-1 assume !(0 == getOrigin_~person); 15279627#L872-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 15279679#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 15279677#L515-1 assume 0 == initPersonOnFloor_~floor; 15279605#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 15279588#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 15278681#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 15199629#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 15278679#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 15278677#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 15278675#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 15278673#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 15278671#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 15278669#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 15278666#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 15278667#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 15304557#L244-63 assume !(0 == isFloorCalling_~floorID); 15304551#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 15304544#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 15304540#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 15304538#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 15304516#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 15304517#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 15396852#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 15396853#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 15396844#L1938-3 assume !(0 != timeShift_~tmp___9~2); 15279292#L2029-9 assume !(1 == ~doorState~0); 15279290#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 15279287#L1378-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 15279288#L818-15 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 15279300#L1382-6 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 15279298#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 15279267#L2037-3 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 15279264#L1809-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~17 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 15279262#L1814-6 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 15279259#L1378-7 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 15279257#L818-17 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 15279255#L1382-7 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 15278430#L1700-7 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 15271245#L2046-3 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 15271243#L1809-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 15271241#L1814-7 timeShift_#t~ret49 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 15271238#L1754-10 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 15271235#L818-18 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 15271236#L1758-30 assume !(0 != continueInDirection_~tmp~6); 15271233#L1764-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 15425769#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 15425768#L2935-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 15425762#L1226-10 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 15425758#L2939-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 15425759#L2947-3 assume !(1 == ~expectedDirection~0); 15424140#L2948-3 cleanup_~i~3 := 0; 15424139#L2576-2 [2018-12-08 08:11:58,373 INFO L796 eck$LassoCheckResult]: Loop: 15424139#L2576-2 assume !false; 15429062#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 15429060#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 15429058#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 15429056#L2584 assume 1 != cleanup_~tmp___0~8; 15429054#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 15429052#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 15429050#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 15429048#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 15429046#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 15429044#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 15429042#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 15429040#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 15429038#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 15429036#L2804-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 15429034#L2805-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 15429032#L2815-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 15403070#L2826-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2;buttonForFloorIsPressed_#in~floorID := 2;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 15424036#L1191-46 assume !(0 == buttonForFloorIsPressed_~floorID); 15424033#L1195-46 assume !(1 == buttonForFloorIsPressed_~floorID); 15424030#L1199-46 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 15424026#L1212-46 __utac_acc__Specification3_spec__1_#t~ret116 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___2~6 := __utac_acc__Specification3_spec__1_#t~ret116;havoc __utac_acc__Specification3_spec__1_#t~ret116; 15424022#L2831-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___2~6;~expectedDirection~0 := 1; 15424018#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 15424017#L244-89 assume !(0 == isFloorCalling_~floorID); 15424015#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 15424014#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 15424012#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 15424011#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 15424008#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 15424009#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 15424915#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 15424916#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 15424907#L1938-4 assume !(0 != timeShift_~tmp___9~2); 15423970#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 15423969#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 15423968#L1378-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 15423967#L818-20 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 15423965#L1382-8 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 15401102#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 15423964#L2037-4 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 15423640#L1809-8 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 15423641#L1814-8 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 15423632#L1378-9 assume !(1 == stopRequestedInDirection_~dir); 15423633#L1547-9 assume !(0 == ~currentFloorID~0); 15423626#L1553-9 assume ~currentFloorID~0 > 0; 15406231#L1554-9 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 15423624#L244-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 15423622#L271-105 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 15423620#L1558-9 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 15423621#L1700-9 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 15423841#L2046-4 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 15423842#L1754-14 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 15423786#L818-24 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 15423787#L1758-42 assume !(0 != continueInDirection_~tmp~6); 15375179#L1764-44 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 15424182#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 15429071#L2935-4 assume !(-1 == ~expectedDirection~0); 15429070#L2947-4 assume !(1 == ~expectedDirection~0); 15424138#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 15424139#L2576-2 [2018-12-08 08:11:58,387 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:11:58,387 INFO L82 PathProgramCache]: Analyzing trace with hash 2110203085, now seen corresponding path program 2 times [2018-12-08 08:11:58,387 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:11:58,387 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:11:58,387 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:58,387 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:11:58,388 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:58,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:11:58,411 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:11:58,411 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:11:58,412 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 08:11:58,412 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:11:58,412 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:11:58,412 INFO L82 PathProgramCache]: Analyzing trace with hash -1178707039, now seen corresponding path program 1 times [2018-12-08 08:11:58,412 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:11:58,412 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:11:58,412 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:58,412 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-08 08:11:58,412 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:11:58,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:11:58,433 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:11:58,433 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:11:58,434 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-12-08 08:11:58,434 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:11:58,434 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-12-08 08:11:58,434 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-12-08 08:11:58,434 INFO L87 Difference]: Start difference. First operand 442843 states and 818467 transitions. cyclomatic complexity: 375647 Second operand 6 states. [2018-12-08 08:12:01,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:12:01,258 INFO L93 Difference]: Finished difference Result 809313 states and 1501559 transitions. [2018-12-08 08:12:01,258 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-12-08 08:12:01,259 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 809313 states and 1501559 transitions. [2018-12-08 08:12:03,934 INFO L131 ngComponentsAnalysis]: Automaton has 26 accepting balls. 223604 [2018-12-08 08:12:10,741 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 809313 states to 809313 states and 1501559 transitions. [2018-12-08 08:12:10,742 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 780408 [2018-12-08 08:12:11,081 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 780408 [2018-12-08 08:12:11,081 INFO L73 IsDeterministic]: Start isDeterministic. Operand 809313 states and 1501559 transitions. [2018-12-08 08:12:11,178 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-12-08 08:12:11,178 INFO L705 BuchiCegarLoop]: Abstraction has 809313 states and 1501559 transitions. [2018-12-08 08:12:11,502 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 809313 states and 1501559 transitions. [2018-12-08 08:12:14,615 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 809313 to 443126. [2018-12-08 08:12:14,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 443126 states. [2018-12-08 08:12:15,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 443126 states to 443126 states and 818708 transitions. [2018-12-08 08:12:15,487 INFO L728 BuchiCegarLoop]: Abstraction has 443126 states and 818708 transitions. [2018-12-08 08:12:15,487 INFO L608 BuchiCegarLoop]: Abstraction has 443126 states and 818708 transitions. [2018-12-08 08:12:15,487 INFO L442 BuchiCegarLoop]: ======== Iteration 29============ [2018-12-08 08:12:15,487 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 443126 states and 818708 transitions. [2018-12-08 08:12:16,205 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 120064 [2018-12-08 08:12:16,205 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:12:16,205 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:12:16,207 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:12:16,207 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:12:16,207 INFO L794 eck$LassoCheckResult]: Stem: 16332764#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 16332765#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 16330797#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 16330357#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 16330358#L2767 assume 0 != main_~tmp~19; 16333134#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 16331182#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 16329576#L868 assume !(0 == getOrigin_~person); 16329502#L872 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 16329503#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 16334943#L515 assume 0 == initPersonOnFloor_~floor; 16329565#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 16327586#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 16330692#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 16330693#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 16333433#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 16333434#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 16330025#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 16330026#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 16330654#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 16330655#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 16331634#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 16329836#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 16335516#L244 assume !(0 == isFloorCalling_~floorID); 16335514#L248 assume !(1 == isFloorCalling_~floorID); 16335512#L252 assume !(2 == isFloorCalling_~floorID); 16335510#L256 assume !(3 == isFloorCalling_~floorID); 16335508#L260 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~0 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 16335506#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 16335504#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 16335351#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 16335340#L1195-10 assume !(1 == buttonForFloorIsPressed_~floorID); 16335338#L1199-10 assume !(2 == buttonForFloorIsPressed_~floorID); 16335336#L1203-10 assume !(3 == buttonForFloorIsPressed_~floorID); 16335334#L1207-10 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~9 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 16335331#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 16335329#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 16335324#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 16335317#L1938 assume !(0 != timeShift_~tmp___9~2); 16335307#L2029 assume !(1 == ~doorState~0); 16335308#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 16335285#L1378 assume !(1 == stopRequestedInDirection_~dir); 16335286#L1547 assume !(0 == ~currentFloorID~0); 16335266#L1553 assume ~currentFloorID~0 > 0; 16335267#L1554 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 16335247#L244-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 16335248#L271-6 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 16335188#L1558 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 16335189#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 16429233#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 16328968#L1754 assume !(1 == ~currentHeading~0); 16328969#L1764 assume !(0 == ~currentFloorID~0); 16495911#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 16495910#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 16492154#L2935 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 16487693#L1226-1 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 16487695#L2939 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 16487685#L2947 assume !(1 == ~expectedDirection~0); 16454738#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 16454737#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 16454736#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 16454735#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 16454729#L2866-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 16454727#L1191-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 16454726#L1212-16 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 16454724#L2870-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 16454725#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 16476154#L244-21 assume !(0 == isFloorCalling_~floorID); 16476153#L248-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 16476149#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 16476144#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 16476145#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 16476151#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 16476148#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 16476146#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 16476147#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 16476136#L1938-1 assume !(0 != timeShift_~tmp___9~2); 16436599#L2029-3 assume !(1 == ~doorState~0); 16436589#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 16436585#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 16436581#L1547-2 assume !(0 == ~currentFloorID~0); 16436578#L1553-2 assume ~currentFloorID~0 > 0; 16436575#L1554-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 16436570#L244-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 16436564#L271-27 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 16436558#L1558-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 16436559#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 16443989#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 16484004#L1754-3 assume !(1 == ~currentHeading~0); 16484002#L1764-9 assume !(0 == ~currentFloorID~0); 16484000#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 16483948#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 16483784#L2935-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 16483676#L1226-4 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 16483704#L2939-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 16483618#L2947-1 assume !(1 == ~expectedDirection~0); 16455674#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 16455673#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 16455672#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 16455671#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 16455670#L2866-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 16455664#L1191-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 16455663#L1212-27 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 16455659#L2870-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 16455660#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 16473653#L244-42 assume !(0 == isFloorCalling_~floorID); 16473615#L248-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 16473613#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 16473611#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 16473609#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 16473605#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 16473607#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 16500078#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 16500077#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 16500075#L1938-2 assume !(0 != timeShift_~tmp___9~2); 16444436#L2029-6 assume !(1 == ~doorState~0); 16444433#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 16444430#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 16444431#L1547-4 assume !(0 == ~currentFloorID~0); 16444458#L1553-4 assume ~currentFloorID~0 > 0; 16444457#L1554-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 16444456#L244-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 16444455#L271-48 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 16444452#L1558-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 16444453#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 16531268#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 16531269#L1754-6 assume !(1 == ~currentHeading~0); 16333882#L1764-18 assume !(0 == ~currentFloorID~0); 16333883#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 16515707#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 16515705#L2935-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 16515494#L1226-7 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 16515702#L2939-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 16515489#L2947-2 assume !(1 == ~expectedDirection~0); 16515484#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 16515481#L868-1 assume !(0 == getOrigin_~person); 16515482#L872-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 16515483#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 16515480#L515-1 assume 0 == initPersonOnFloor_~floor; 16515431#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 16515412#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 16515411#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 16380791#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 16380792#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 16415883#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 16415881#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 16415879#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 16415876#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 16415874#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 16415870#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 16415871#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 16560982#L244-63 assume !(0 == isFloorCalling_~floorID); 16560956#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 16560953#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 16560950#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 16560947#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 16552816#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 16552817#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 16632819#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 16632813#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 16632811#L1938-3 assume !(0 != timeShift_~tmp___9~2); 16545721#L2029-9 assume !(1 == ~doorState~0); 16545720#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 16545718#L1378-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 16545719#L818-15 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 16552698#L1382-6 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 16552699#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 16555640#L2037-3 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 16555638#L1809-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~17 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 16555636#L1814-6 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 16555637#L1378-7 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 16556815#L818-17 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 16558008#L1382-7 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 16558009#L1700-7 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 16770051#L2046-3 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 16626878#L1809-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 16626879#L1814-7 timeShift_#t~ret49 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 16558057#L1754-10 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 16558058#L818-18 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 16626098#L1758-30 assume !(0 != continueInDirection_~tmp~6); 16558056#L1764-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 16770107#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 16770106#L2935-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 16770104#L1226-10 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 16770102#L2939-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 16770079#L2947-3 assume !(1 == ~expectedDirection~0); 16770072#L2948-3 cleanup_~i~3 := 0; 16770064#L2576-2 [2018-12-08 08:12:16,222 INFO L796 eck$LassoCheckResult]: Loop: 16770064#L2576-2 assume !false; 16769995#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 16769992#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 16702097#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 16702093#L2584 assume 1 != cleanup_~tmp___0~8; 16702089#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 16702085#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 16701984#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 16701970#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 16701883#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 16682710#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 16682711#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 16668816#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 16668817#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 16668809#L2804-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 16668810#L2805-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 16667396#L2815-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 16651887#L2826-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2;buttonForFloorIsPressed_#in~floorID := 2;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 16667364#L1191-46 assume !(0 == buttonForFloorIsPressed_~floorID); 16667361#L1195-46 assume !(1 == buttonForFloorIsPressed_~floorID); 16667358#L1199-46 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 16667354#L1212-46 __utac_acc__Specification3_spec__1_#t~ret116 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___2~6 := __utac_acc__Specification3_spec__1_#t~ret116;havoc __utac_acc__Specification3_spec__1_#t~ret116; 16667350#L2831-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___2~6;~expectedDirection~0 := 1; 16667346#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 16667345#L244-89 assume !(0 == isFloorCalling_~floorID); 16667343#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 16667342#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 16667340#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 16667339#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 16667336#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 16667337#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 16705808#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 16705809#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 16705800#L1938-4 assume !(0 != timeShift_~tmp___9~2); 16665242#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 16665240#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 16665239#L1378-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 16665238#L818-20 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 16665236#L1382-8 assume !(0 != stopRequestedInDirection_~tmp~5); 16665235#L1388-8 assume !(~currentFloorID~0 < 0); 16665234#L1403-8 assume !(~currentFloorID~0 < 0); 16665225#L1416-8 assume !(~currentFloorID~0 < 1); 16665223#L1432-8 assume !(~currentFloorID~0 < 1); 16665202#L1445-8 assume ~currentFloorID~0 < 2; 16665200#L1447-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 16665199#L244-92 assume !(0 == isFloorCalling_~floorID); 16665098#L248-92 assume !(1 == isFloorCalling_~floorID); 16665066#L252-92 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 16664983#L271-92 stopRequestedInDirection_#t~ret16 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~1 := stopRequestedInDirection_#t~ret16;havoc stopRequestedInDirection_#t~ret16; 16664984#L1451-8 assume 0 != stopRequestedInDirection_~tmp___2~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 16665510#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 16665508#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 16665509#L1754-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 16658812#L818-21 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 16658813#L1758-36 assume !(0 != continueInDirection_~tmp~6); 16765843#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 16770111#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 16770109#L2935-4 assume !(-1 == ~expectedDirection~0); 16770100#L2947-4 assume !(1 == ~expectedDirection~0); 16770071#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 16770064#L2576-2 [2018-12-08 08:12:16,235 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:12:16,235 INFO L82 PathProgramCache]: Analyzing trace with hash 2110203085, now seen corresponding path program 3 times [2018-12-08 08:12:16,235 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:12:16,235 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:12:16,235 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:12:16,235 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:12:16,235 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:12:16,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:12:16,262 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:12:16,263 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:12:16,263 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 08:12:16,263 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:12:16,263 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:12:16,263 INFO L82 PathProgramCache]: Analyzing trace with hash 1482711019, now seen corresponding path program 1 times [2018-12-08 08:12:16,263 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:12:16,263 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:12:16,263 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:12:16,263 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-08 08:12:16,263 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:12:16,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:12:16,271 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:12:16,271 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:12:16,271 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 08:12:16,271 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 08:12:16,271 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-08 08:12:16,271 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-08 08:12:16,272 INFO L87 Difference]: Start difference. First operand 443126 states and 818708 transitions. cyclomatic complexity: 375605 Second operand 3 states. [2018-12-08 08:12:18,135 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:12:18,136 INFO L93 Difference]: Finished difference Result 598340 states and 1107177 transitions. [2018-12-08 08:12:18,136 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-08 08:12:18,136 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 598340 states and 1107177 transitions. [2018-12-08 08:12:20,195 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 167635 [2018-12-08 08:12:21,430 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 598340 states to 598340 states and 1107177 transitions. [2018-12-08 08:12:21,430 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 576415 [2018-12-08 08:12:21,769 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 576415 [2018-12-08 08:12:21,769 INFO L73 IsDeterministic]: Start isDeterministic. Operand 598340 states and 1107177 transitions. [2018-12-08 08:12:21,890 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-12-08 08:12:21,890 INFO L705 BuchiCegarLoop]: Abstraction has 598340 states and 1107177 transitions. [2018-12-08 08:12:22,169 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 598340 states and 1107177 transitions. [2018-12-08 08:12:25,786 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 598340 to 588958. [2018-12-08 08:12:25,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 588958 states. [2018-12-08 08:12:26,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 588958 states to 588958 states and 1092359 transitions. [2018-12-08 08:12:26,925 INFO L728 BuchiCegarLoop]: Abstraction has 588958 states and 1092359 transitions. [2018-12-08 08:12:26,925 INFO L608 BuchiCegarLoop]: Abstraction has 588958 states and 1092359 transitions. [2018-12-08 08:12:26,925 INFO L442 BuchiCegarLoop]: ======== Iteration 30============ [2018-12-08 08:12:26,925 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 588958 states and 1092359 transitions. [2018-12-08 08:12:27,763 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 165055 [2018-12-08 08:12:27,763 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 08:12:27,763 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 08:12:27,765 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:12:27,765 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 08:12:27,765 INFO L794 eck$LassoCheckResult]: Stem: 17374125#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25); 17374126#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 17372233#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 17371786#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 17371787#L2767 assume 0 != main_~tmp~19; 17374488#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 17372604#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 17371041#L868 assume !(0 == getOrigin_~person); 17370967#L872 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 17370968#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 17376153#L515 assume 0 == initPersonOnFloor_~floor; 17371030#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 17369063#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 17372131#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 17372132#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 17422725#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 17422724#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 17371452#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 17371453#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 17371685#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 17369509#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 17369510#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 17422715#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 17422714#L244 assume !(0 == isFloorCalling_~floorID); 17422713#L248 assume !(1 == isFloorCalling_~floorID); 17422712#L252 assume !(2 == isFloorCalling_~floorID); 17422711#L256 assume !(3 == isFloorCalling_~floorID); 17422710#L260 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~0 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 17422709#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 17422708#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 17422707#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 17422706#L1195-10 assume !(1 == buttonForFloorIsPressed_~floorID); 17422705#L1199-10 assume !(2 == buttonForFloorIsPressed_~floorID); 17422704#L1203-10 assume !(3 == buttonForFloorIsPressed_~floorID); 17422703#L1207-10 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~9 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 17422702#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 17422700#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 17422699#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 17422697#L1938 assume !(0 != timeShift_~tmp___9~2); 17422696#L2029 assume !(1 == ~doorState~0); 17422695#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 17422693#L1378 assume !(1 == stopRequestedInDirection_~dir); 17422692#L1547 assume !(0 == ~currentFloorID~0); 17422691#L1553 assume ~currentFloorID~0 > 0; 17422690#L1554 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 17422689#L244-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 17422688#L271-6 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 17422686#L1558 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 17422687#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 17422760#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 17547501#L1754 assume !(1 == ~currentHeading~0); 17547499#L1764 assume !(0 == ~currentFloorID~0); 17547497#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 17547496#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 17547495#L2935 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 17547188#L1226-1 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 17547374#L2939 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 17481294#L2947 assume !(1 == ~expectedDirection~0); 17391620#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 17391514#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 17391513#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 17391511#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 17390932#L2866-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 17390933#L1191-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 17531410#L1212-16 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 17531381#L2870-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 17531382#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 17588397#L244-21 assume !(0 == isFloorCalling_~floorID); 17588398#L248-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 17594464#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 17594449#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 17594451#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 17594478#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 17594465#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 17594452#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 17594447#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 17594448#L1938-1 assume !(0 != timeShift_~tmp___9~2); 17375209#L2029-3 assume !(1 == ~doorState~0); 17374981#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 17372698#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 17371757#L1547-2 assume !(0 == ~currentFloorID~0); 17371758#L1553-2 assume ~currentFloorID~0 > 0; 17372760#L1554-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 17531927#L244-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 17531926#L271-27 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 17531924#L1558-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 17531925#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 17543486#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 17543485#L1754-3 assume !(1 == ~currentHeading~0); 17532108#L1764-9 assume !(0 == ~currentFloorID~0); 17531963#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 17531936#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 17496116#L2935-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 17496010#L1226-4 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 17495984#L2939-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 17495985#L2947-1 assume !(1 == ~expectedDirection~0); 17579966#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 17579965#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 17579964#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 17391377#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 17391378#L2866-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 17579748#L1191-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 17579747#L1212-27 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 17579745#L2870-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 17579746#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 17588391#L244-42 assume !(0 == isFloorCalling_~floorID); 17588392#L248-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 17610217#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 17610215#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 17610212#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 17610206#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 17610203#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 17610199#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 17610197#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 17610193#L1938-2 assume !(0 != timeShift_~tmp___9~2); 17502636#L2029-6 assume !(1 == ~doorState~0); 17502634#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 17502631#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 17502629#L1547-4 assume !(0 == ~currentFloorID~0); 17502624#L1553-4 assume ~currentFloorID~0 > 0; 17502621#L1554-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 17502615#L244-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 17502612#L271-48 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 17502595#L1558-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 17502596#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 17603550#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 17370310#L1754-6 assume !(1 == ~currentHeading~0); 17370311#L1764-18 assume !(0 == ~currentFloorID~0); 17375224#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 17375193#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 17670436#L2935-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 17670431#L1226-7 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 17670435#L2939-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 17670424#L2947-2 assume !(1 == ~expectedDirection~0); 17670423#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 17670390#L868-1 assume !(0 == getOrigin_~person); 17670388#L872-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 17670248#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 17661387#L515-1 assume 0 == initPersonOnFloor_~floor; 17661368#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 17661351#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 17481484#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 17481485#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 17383096#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 17383097#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 17383080#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 17383081#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 17657361#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 17657358#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 17657354#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 17657355#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 17658413#L244-63 assume !(0 == isFloorCalling_~floorID); 17658341#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 17658282#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 17658276#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 17658271#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 17657915#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 17657916#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 17764521#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 17764522#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 17764513#L1938-3 assume !(0 != timeShift_~tmp___9~2); 17510445#L2029-9 assume !(1 == ~doorState~0); 17510444#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 17510441#L1378-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 17510442#L818-15 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 17654258#L1382-6 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 17654259#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 17656737#L2037-3 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 17656733#L1809-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~17 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 17656719#L1814-6 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 17656720#L1378-7 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 17656711#L818-17 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 17656703#L1382-7 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 17656704#L1700-7 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 17748970#L2046-3 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 17653259#L1809-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 17653260#L1814-7 timeShift_#t~ret49 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 17541873#L1754-10 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 17541874#L818-18 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 17653389#L1758-30 assume !(0 != continueInDirection_~tmp~6); 17541871#L1764-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 17937877#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 17937875#L2935-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 17937774#L1226-10 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 17937772#L2939-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 17937718#L2947-3 assume !(1 == ~expectedDirection~0); 17937700#L2948-3 cleanup_~i~3 := 0; 17937651#L2576-2 [2018-12-08 08:12:27,781 INFO L796 eck$LassoCheckResult]: Loop: 17937651#L2576-2 assume !false; 17937642#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 17937638#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 17937634#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 17937630#L2584 assume 1 != cleanup_~tmp___0~8; 17937625#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 17937618#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 17937611#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 17937519#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 17937508#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 17937502#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 17922921#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 17922919#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 17922917#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 17922915#L2804-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 17922913#L2805-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 17816629#L2815-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 17816626#L2826-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2;buttonForFloorIsPressed_#in~floorID := 2;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 17816627#L1191-46 assume !(0 == buttonForFloorIsPressed_~floorID); 17933346#L1195-46 assume !(1 == buttonForFloorIsPressed_~floorID); 17933344#L1199-46 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 17933342#L1212-46 __utac_acc__Specification3_spec__1_#t~ret116 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___2~6 := __utac_acc__Specification3_spec__1_#t~ret116;havoc __utac_acc__Specification3_spec__1_#t~ret116; 17933339#L2831-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___2~6;~expectedDirection~0 := 1; 17933333#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 17933331#L244-89 assume !(0 == isFloorCalling_~floorID); 17933328#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 17933326#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 17933278#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 17933280#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 17933351#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 17933349#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 17933281#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 17933274#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 17933275#L1938-4 assume !(0 != timeShift_~tmp___9~2); 17938555#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 17938553#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 17938549#L1378-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 17938547#L818-20 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 17938542#L1382-8 assume !(0 != stopRequestedInDirection_~tmp~5); 17938539#L1388-8 assume !(~currentFloorID~0 < 0); 17938534#L1403-8 assume !(~currentFloorID~0 < 0); 17938530#L1416-8 assume !(~currentFloorID~0 < 1); 17938521#L1432-8 assume !(~currentFloorID~0 < 1); 17938520#L1445-8 assume ~currentFloorID~0 < 2; 17938518#L1447-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 17938516#L244-92 assume !(0 == isFloorCalling_~floorID); 17938514#L248-92 assume !(1 == isFloorCalling_~floorID); 17938506#L252-92 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 17938496#L271-92 stopRequestedInDirection_#t~ret16 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~1 := stopRequestedInDirection_#t~ret16;havoc stopRequestedInDirection_#t~ret16; 17938483#L1451-8 assume 0 != stopRequestedInDirection_~tmp___2~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 17938480#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 17938477#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 17938473#L1754-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 17938470#L818-21 continueInDirection_#t~ret24 := isTopFloor_#res;continueInDirection_~tmp~6 := continueInDirection_#t~ret24;havoc continueInDirection_#t~ret24; 17938465#L1758-36 assume !(0 != continueInDirection_~tmp~6); 17938072#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 17937887#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 17937886#L2935-4 assume !(-1 == ~expectedDirection~0); 17937779#L2947-4 assume 1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 17937776#L1226-14 __utac_acc__Specification3_spec__2_#t~ret125 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp~21 := __utac_acc__Specification3_spec__2_#t~ret125;havoc __utac_acc__Specification3_spec__2_#t~ret125; 17937722#L2952-8 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~21); 17937699#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 17937651#L2576-2 [2018-12-08 08:12:27,793 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:12:27,793 INFO L82 PathProgramCache]: Analyzing trace with hash 2110203085, now seen corresponding path program 4 times [2018-12-08 08:12:27,793 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:12:27,793 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:12:27,794 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:12:27,794 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 08:12:27,794 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:12:27,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:12:27,831 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:12:27,831 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 08:12:27,831 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 08:12:27,831 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 08:12:27,831 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:12:27,831 INFO L82 PathProgramCache]: Analyzing trace with hash -1043348400, now seen corresponding path program 1 times [2018-12-08 08:12:27,832 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 08:12:27,832 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 08:12:27,832 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:12:27,832 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-08 08:12:27,832 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 08:12:27,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-12-08 08:12:27,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-12-08 08:12:28,801 WARN L180 SmtUtils]: Spent 955.00 ms on a formula simplification. DAG size of input: 229 DAG size of output: 185 [2018-12-08 08:12:29,209 WARN L180 SmtUtils]: Spent 404.00 ms on a formula simplification. DAG size of input: 153 DAG size of output: 142 [2018-12-08 08:12:29,210 INFO L216 LassoAnalysis]: Preferences: [2018-12-08 08:12:29,210 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-12-08 08:12:29,210 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-12-08 08:12:29,210 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-12-08 08:12:29,210 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-12-08 08:12:29,210 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:29,210 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-12-08 08:12:29,211 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-12-08 08:12:29,211 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product09_true-unreach-call_true-termination.cil.c_Iteration30_Loop [2018-12-08 08:12:29,211 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-12-08 08:12:29,211 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-12-08 08:12:29,213 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,216 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,219 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,220 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,221 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,222 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,222 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,223 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,224 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,225 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,226 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,227 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,227 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,228 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,229 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,230 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,232 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,233 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,234 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,236 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,249 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,250 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,251 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,252 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,262 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,264 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,267 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,268 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,269 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,269 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,270 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,271 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,272 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,273 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,276 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,279 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,279 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,280 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,281 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,282 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,286 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,287 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,288 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,289 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,290 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,291 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,293 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,294 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,296 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,296 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,297 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,298 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,299 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,300 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,302 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,306 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,310 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,311 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,312 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,313 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,315 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,320 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,321 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,322 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,322 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,323 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,324 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,325 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,328 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,329 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,329 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,342 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,345 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,345 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,347 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,348 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,349 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,350 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,350 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,351 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,352 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,353 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,356 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,356 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,359 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,359 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,360 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,361 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,362 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,363 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,363 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,364 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,367 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,368 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,369 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,371 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,372 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,372 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:29,726 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-12-08 08:12:29,726 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 63 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 63 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:29,730 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:29,730 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:29,732 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:29,732 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___9~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___9~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 64 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 64 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:29,748 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:29,748 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:29,750 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:29,750 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 65 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 65 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:29,764 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:29,765 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:29,767 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:29,767 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret14=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret14=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 66 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 66 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:29,788 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:29,789 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:29,791 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:29,791 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret40=0} Honda state: {ULTIMATE.start_timeShift_#t~ret40=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 67 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 67 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:29,811 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:29,811 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:29,812 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:29,812 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret48=0} Honda state: {ULTIMATE.start_timeShift_#t~ret48=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 68 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 68 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:29,827 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:29,827 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:29,829 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:29,829 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret123=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret123=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 69 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 69 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:29,844 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:29,844 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:29,846 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:29,846 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 70 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 70 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:29,860 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:29,860 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:29,862 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:29,862 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 71 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 71 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:29,876 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:29,876 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:29,878 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:29,878 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret39=0} Honda state: {ULTIMATE.start_timeShift_#t~ret39=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 72 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 72 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:29,892 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:29,892 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:29,895 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:29,895 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 73 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 73 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:29,910 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:29,910 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:29,912 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:29,912 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~3=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 74 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 74 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:29,926 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:29,927 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:29,928 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:29,928 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret117=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret117=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 75 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 75 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:29,943 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:29,943 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:29,944 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:29,945 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#t~ret24=0} Honda state: {ULTIMATE.start_continueInDirection_#t~ret24=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 76 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 76 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,485 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,485 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,487 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,487 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret45=0} Honda state: {ULTIMATE.start_timeShift_#t~ret45=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 77 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 77 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,501 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,501 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,503 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,503 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret124=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret124=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 78 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 78 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,517 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,518 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,523 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,523 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp~17=0} Honda state: {ULTIMATE.start_cleanup_~tmp~17=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 79 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 79 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,544 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,545 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,546 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,546 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret47=0} Honda state: {ULTIMATE.start_timeShift_#t~ret47=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 80 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 80 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,561 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,561 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,563 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,563 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret15=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret15=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 81 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 81 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,577 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,577 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,579 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,579 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret9=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret9=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 82 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 82 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,593 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,593 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,595 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,595 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret106=0} Honda state: {ULTIMATE.start_cleanup_#t~ret106=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 83 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 83 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,609 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,609 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,612 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,612 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp___0~8=0, ULTIMATE.start_isBlocked_~retValue_acc~6=0, ULTIMATE.start_isBlocked_#res=0} Honda state: {ULTIMATE.start_cleanup_~tmp___0~8=0, ULTIMATE.start_isBlocked_~retValue_acc~6=0, ULTIMATE.start_isBlocked_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 84 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 84 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,626 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,627 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,629 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,629 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp___0~11=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp___0~11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 85 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 85 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,643 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,643 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,645 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,645 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___4~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___4~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 86 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 86 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,659 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,659 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,661 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,661 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret118=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret118=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 87 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 87 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,675 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,676 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,680 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,680 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir=1, ULTIMATE.start_stopRequestedInDirection_~dir=1, ~currentHeading~0=1, ULTIMATE.start_stopRequestedInDirection_#in~dir=1, ULTIMATE.start_continueInDirection_~dir=1, ULTIMATE.start_getCurrentHeading_~retValue_acc~10=1, ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp~21=1, ULTIMATE.start_getCurrentHeading_#res=1} Honda state: {ULTIMATE.start_continueInDirection_#in~dir=1, ULTIMATE.start_stopRequestedInDirection_~dir=1, ~currentHeading~0=1, ULTIMATE.start_stopRequestedInDirection_#in~dir=1, ULTIMATE.start_continueInDirection_~dir=1, ULTIMATE.start_getCurrentHeading_~retValue_acc~10=1, ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp~21=1, ULTIMATE.start_getCurrentHeading_#res=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 88 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 88 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,695 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,695 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,696 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,697 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~8=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 89 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 89 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,711 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,711 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,713 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,713 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret112=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret112=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 90 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 90 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,734 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,734 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,736 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,737 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_#in~floorID=2, ULTIMATE.start_isFloorCalling_~floorID=2} Honda state: {ULTIMATE.start_isFloorCalling_#in~floorID=2, ULTIMATE.start_isFloorCalling_~floorID=2} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 91 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 91 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,751 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,751 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,753 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,753 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret125=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret125=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 92 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 92 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,767 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,767 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,769 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,769 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret115=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret115=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 93 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 93 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,783 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,783 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,785 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,785 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 94 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 94 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,799 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,799 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,801 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,802 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret121=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret121=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 95 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 95 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,824 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,824 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,827 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,827 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret42=0} Honda state: {ULTIMATE.start_timeShift_#t~ret42=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 96 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 96 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,842 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,842 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,844 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,844 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 97 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 97 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,865 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,865 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,867 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,867 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret21=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret21=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 98 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 98 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,881 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,881 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,884 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,884 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 99 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 99 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,898 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,898 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,901 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,901 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~calls_1~0=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~4=0} Honda state: {~calls_1~0=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 100 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 100 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,915 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,915 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,917 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,917 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret12=0} Honda state: {ULTIMATE.start_isIdle_#t~ret12=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 101 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 101 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,931 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,931 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,933 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,933 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~9=0} Honda state: {ULTIMATE.start_timeShift_~tmp~9=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 102 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 102 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,955 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,955 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,956 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,957 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret7=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 103 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 103 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,971 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,971 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:32,973 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 08:12:32,973 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret13=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret13=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 104 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 104 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:32,987 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 08:12:32,987 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_268079f1-d1fb-49fa-af95-3656e5ba3a6b/bin-2019/uautomizer/z3 Starting monitored process 105 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 105 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:33,003 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-12-08 08:12:33,003 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 08:12:33,403 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-12-08 08:12:33,405 INFO L216 LassoAnalysis]: Preferences: [2018-12-08 08:12:33,405 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-12-08 08:12:33,405 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-12-08 08:12:33,405 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-12-08 08:12:33,405 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-12-08 08:12:33,405 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 08:12:33,405 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-12-08 08:12:33,405 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-12-08 08:12:33,405 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product09_true-unreach-call_true-termination.cil.c_Iteration30_Loop [2018-12-08 08:12:33,405 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-12-08 08:12:33,405 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-12-08 08:12:33,407 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,409 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,410 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,415 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,416 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,417 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,417 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,418 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,419 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,420 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,420 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,421 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,422 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,423 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,423 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,424 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,427 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,428 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,429 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,430 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,431 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,431 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,434 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,435 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,436 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,447 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,448 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,449 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,451 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,452 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,453 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,453 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,454 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,455 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,456 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,456 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,457 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,458 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,459 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,459 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,460 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,462 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,463 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,464 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,467 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,469 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,470 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,474 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,474 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,475 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,476 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,477 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,478 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,479 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,480 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,482 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,482 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,483 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,489 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,489 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,490 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,491 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,492 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,493 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,494 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,494 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,498 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,499 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,500 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,500 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,510 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,511 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,515 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,516 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,516 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,519 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,520 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,520 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,523 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,523 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,524 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,525 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,526 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,526 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,527 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,530 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,533 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,534 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,534 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,535 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,536 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,537 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,538 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,538 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,539 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,540 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,541 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,543 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,546 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,547 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,548 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 08:12:33,888 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-12-08 08:12:33,888 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-12-08 08:12:33,888 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,888 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,888 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,888 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,889 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,889 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,889 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,889 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,889 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,889 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,890 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,890 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,890 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,890 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,890 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,890 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,890 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,890 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,890 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,890 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,890 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,891 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,891 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,891 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,891 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,891 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,891 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,891 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,891 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,891 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,891 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,891 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,891 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,892 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,892 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,892 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,892 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,892 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,892 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,892 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,892 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,892 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,892 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,892 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,893 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,893 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,893 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,893 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,893 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,893 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,893 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,893 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,893 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,893 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,894 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,894 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,894 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,894 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,894 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,894 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,894 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,894 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,894 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,894 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,894 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,895 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,895 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,895 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,895 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,895 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,895 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,895 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,895 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,895 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,895 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,895 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,895 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,896 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,896 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,896 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,896 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,896 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,896 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,896 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,896 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,896 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,896 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,896 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,896 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,897 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,897 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,897 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,897 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,897 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,897 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,897 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,897 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,897 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,897 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,898 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,898 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,898 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,898 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,898 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,898 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,898 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,898 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,898 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,898 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,898 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,898 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,899 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,899 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,899 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,899 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,899 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,899 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,899 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,899 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,899 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,899 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,899 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,899 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,900 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,900 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,900 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,900 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,900 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,900 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,900 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,900 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,900 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,900 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,900 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,901 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,901 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,901 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,901 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,901 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,901 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,901 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,901 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,901 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,901 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,902 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,902 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,902 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,902 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,902 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,902 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,902 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,902 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,902 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,902 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,903 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,903 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,903 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,903 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,903 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,903 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,903 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,903 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,903 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,903 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,903 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,904 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,904 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,904 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,904 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,904 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,904 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,904 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,904 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,904 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,904 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,904 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,904 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,905 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,905 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,905 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,905 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,905 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,905 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,905 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,905 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,905 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,905 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,905 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,906 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,906 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,906 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,906 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,906 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,906 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,906 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,906 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,906 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,907 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,908 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,908 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,908 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,908 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,908 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,908 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,908 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,908 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,908 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,909 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,909 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,909 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,909 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,909 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,909 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,909 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,909 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,909 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,910 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,910 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,910 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,910 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,910 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,910 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,910 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,910 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,912 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,912 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,912 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,912 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,912 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,912 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,913 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,913 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,913 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,913 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,913 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,913 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,913 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,913 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,913 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,913 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,914 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,914 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,914 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,914 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,914 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,914 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,914 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,914 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,914 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,914 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,915 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,915 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,915 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,915 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,915 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,915 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,915 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,915 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,915 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,916 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,916 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,916 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,916 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,916 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,916 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,916 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,916 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,916 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,917 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,917 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,917 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,917 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,917 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,917 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,917 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,917 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,917 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,917 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,918 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,918 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,918 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,918 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,918 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,918 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,918 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,918 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,918 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,919 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,919 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,919 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,919 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,919 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,919 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,919 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,919 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,919 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,919 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,920 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,920 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,920 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,920 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,920 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,920 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,920 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,920 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,920 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,920 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,921 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,921 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,921 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,921 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,921 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,921 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,921 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,921 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,921 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,921 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,922 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,922 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,922 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,922 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,922 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,922 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,922 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,922 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,922 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,922 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,922 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,923 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,923 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,923 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,923 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,923 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,923 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,923 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,923 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,923 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,923 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,923 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,924 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,924 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,924 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,924 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,924 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,924 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,924 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,924 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,924 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,924 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,924 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,925 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,925 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,925 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,925 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,925 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,925 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,925 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,925 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,925 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,925 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,926 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,926 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,926 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,926 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,926 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,926 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,926 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,926 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,927 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,927 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,927 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,927 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,927 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,927 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,927 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,927 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,927 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,928 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,928 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,928 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,928 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,928 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,928 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,928 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,928 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,928 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,928 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,929 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,929 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,929 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,929 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,929 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,929 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,929 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,929 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,930 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,930 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,930 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,930 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,930 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,930 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,930 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,931 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,931 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,931 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,931 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,932 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,932 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,932 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,932 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,932 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,932 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,932 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,932 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 08:12:33,932 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 08:12:33,932 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 08:12:33,932 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 08:12:33,933 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 08:12:33,933 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 08:12:33,933 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 08:12:33,933 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 08:12:33,933 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 08:12:33,934 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-12-08 08:12:33,935 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-12-08 08:12:33,935 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-12-08 08:12:33,935 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-12-08 08:12:33,935 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-12-08 08:12:33,935 INFO L518 LassoAnalysis]: Proved termination. [2018-12-08 08:12:33,935 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~3) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~3 Supporting invariants [] [2018-12-08 08:12:33,935 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-12-08 08:12:33,947 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 08:12:34,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:12:34,068 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-12-08 08:12:34,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 08:12:34,102 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-12-08 08:12:34,117 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 08:12:34,118 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-12-08 08:12:34,118 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 588958 states and 1092359 transitions. cyclomatic complexity: 503424 Second operand 5 states. [2018-12-08 08:12:36,324 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 588958 states and 1092359 transitions. cyclomatic complexity: 503424. Second operand 5 states. Result 778075 states and 1441021 transitions. Complement of second has 8 states. [2018-12-08 08:12:36,325 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-12-08 08:12:36,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-12-08 08:12:36,329 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 10071 transitions. [2018-12-08 08:12:36,329 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10071 transitions. Stem has 187 letters. Loop has 62 letters. [2018-12-08 08:12:36,330 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-08 08:12:36,330 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10071 transitions. Stem has 249 letters. Loop has 62 letters. [2018-12-08 08:12:36,330 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-08 08:12:36,330 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10071 transitions. Stem has 187 letters. Loop has 124 letters. [2018-12-08 08:12:36,331 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-08 08:12:36,331 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 778075 states and 1441021 transitions. [2018-12-08 08:12:38,967 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-08 08:12:38,967 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 778075 states to 0 states and 0 transitions. [2018-12-08 08:12:38,968 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-12-08 08:12:38,968 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-12-08 08:12:38,968 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-12-08 08:12:38,968 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:12:38,968 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-08 08:12:38,968 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-08 08:12:38,968 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-08 08:12:38,968 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-08 08:12:38,968 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 3 states. [2018-12-08 08:12:38,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 08:12:38,968 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-12-08 08:12:38,968 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-12-08 08:12:38,968 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-12-08 08:12:38,968 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-08 08:12:38,968 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-12-08 08:12:38,968 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-12-08 08:12:38,968 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-12-08 08:12:38,969 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-12-08 08:12:38,969 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 08:12:38,969 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-08 08:12:38,969 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-08 08:12:38,969 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-08 08:12:38,969 INFO L442 BuchiCegarLoop]: ======== Iteration 31============ [2018-12-08 08:12:38,969 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-12-08 08:12:38,969 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-08 08:12:38,969 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-12-08 08:12:38,973 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 08.12 08:12:38 BoogieIcfgContainer [2018-12-08 08:12:38,973 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-12-08 08:12:38,973 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-12-08 08:12:38,973 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-12-08 08:12:38,973 INFO L276 PluginConnector]: Witness Printer initialized [2018-12-08 08:12:38,974 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.12 08:07:49" (3/4) ... [2018-12-08 08:12:38,976 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-12-08 08:12:38,976 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-12-08 08:12:38,976 INFO L168 Benchmark]: Toolchain (without parser) took 294908.41 ms. Allocated memory was 1.0 GB in the beginning and 10.1 GB in the end (delta: 9.1 GB). Free memory was 949.6 MB in the beginning and 7.0 GB in the end (delta: -6.0 GB). Peak memory consumption was 3.1 GB. Max. memory is 11.5 GB. [2018-12-08 08:12:38,977 INFO L168 Benchmark]: CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 976.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-12-08 08:12:38,977 INFO L168 Benchmark]: CACSL2BoogieTranslator took 476.91 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 116.4 MB). Free memory was 949.6 MB in the beginning and 1.1 GB in the end (delta: -123.0 MB). Peak memory consumption was 48.3 MB. Max. memory is 11.5 GB. [2018-12-08 08:12:38,977 INFO L168 Benchmark]: Boogie Procedure Inliner took 147.85 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 54.2 MB). Peak memory consumption was 54.2 MB. Max. memory is 11.5 GB. [2018-12-08 08:12:38,977 INFO L168 Benchmark]: Boogie Preprocessor took 138.83 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 969.7 MB in the end (delta: 48.6 MB). Peak memory consumption was 48.6 MB. Max. memory is 11.5 GB. [2018-12-08 08:12:38,978 INFO L168 Benchmark]: RCFGBuilder took 4893.97 ms. Allocated memory was 1.1 GB in the beginning and 1.4 GB in the end (delta: 295.7 MB). Free memory was 969.7 MB in the beginning and 921.6 MB in the end (delta: 48.1 MB). Peak memory consumption was 343.8 MB. Max. memory is 11.5 GB. [2018-12-08 08:12:38,978 INFO L168 Benchmark]: BuchiAutomizer took 289245.23 ms. Allocated memory was 1.4 GB in the beginning and 10.1 GB in the end (delta: 8.7 GB). Free memory was 921.6 MB in the beginning and 7.0 GB in the end (delta: -6.0 GB). Peak memory consumption was 2.7 GB. Max. memory is 11.5 GB. [2018-12-08 08:12:38,978 INFO L168 Benchmark]: Witness Printer took 2.74 ms. Allocated memory is still 10.1 GB. Free memory is still 7.0 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-12-08 08:12:38,980 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 976.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 476.91 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 116.4 MB). Free memory was 949.6 MB in the beginning and 1.1 GB in the end (delta: -123.0 MB). Peak memory consumption was 48.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 147.85 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 54.2 MB). Peak memory consumption was 54.2 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 138.83 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 969.7 MB in the end (delta: 48.6 MB). Peak memory consumption was 48.6 MB. Max. memory is 11.5 GB. * RCFGBuilder took 4893.97 ms. Allocated memory was 1.1 GB in the beginning and 1.4 GB in the end (delta: 295.7 MB). Free memory was 969.7 MB in the beginning and 921.6 MB in the end (delta: 48.1 MB). Peak memory consumption was 343.8 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 289245.23 ms. Allocated memory was 1.4 GB in the beginning and 10.1 GB in the end (delta: 8.7 GB). Free memory was 921.6 MB in the beginning and 7.0 GB in the end (delta: -6.0 GB). Peak memory consumption was 2.7 GB. Max. memory is 11.5 GB. * Witness Printer took 2.74 ms. Allocated memory is still 10.1 GB. Free memory is still 7.0 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 32 terminating modules (30 trivial, 2 deterministic, 0 nondeterministic). One deterministic module has affine ranking function -2 * currentFloorID + 1 and consists of 5 locations. One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 30 modules have a trivial ranking function, the largest among these consists of 8 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 289.2s and 31 iterations. TraceHistogramMax:1. Analysis of lassos took 15.0s. Construction of modules took 36.1s. Büchi inclusion checks took 48.5s. Highest rank in rank-based complementation 3. Minimization of det autom 18. Minimization of nondet autom 14. Automata minimization 83.4s AutomataMinimizationTime, 30 MinimizatonAttempts, 4747931 StatesRemovedByMinimization, 30 NontrivialMinimizations. Non-live state removal took 85.2s Buchi closure took 6.5s. Biggest automaton had 588958 states and ocurred in iteration 29. Nontrivial modules had stage [2, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 578879 SDtfs, 1110694 SDslu, 1057936 SDs, 0 SdLazy, 63082 SolverSat, 6962 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 36.1s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI28 SILT2 lasso0 LassoPreprocessingBenchmarks: Lassos: inital201 mio100 ax100 hnf100 lsp16 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq220 hnf88 smp100 dnf224 smp73 tf102 neg99 sie101 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 3ms VariablesStem: 0 VariablesLoop: 2 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 100 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 2 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 5.3s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...