./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product25_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 635dfa2a Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product25_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c6671d27cfc2bdc7710085525ce5a61867ea778d ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-635dfa2 [2018-12-08 17:20:37,223 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-12-08 17:20:37,224 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-12-08 17:20:37,231 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-12-08 17:20:37,231 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-12-08 17:20:37,231 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-12-08 17:20:37,232 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-12-08 17:20:37,233 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-12-08 17:20:37,233 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-12-08 17:20:37,234 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-12-08 17:20:37,234 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-12-08 17:20:37,234 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-12-08 17:20:37,235 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-12-08 17:20:37,235 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-12-08 17:20:37,236 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-12-08 17:20:37,236 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-12-08 17:20:37,236 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-12-08 17:20:37,237 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-12-08 17:20:37,238 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-12-08 17:20:37,239 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-12-08 17:20:37,239 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-12-08 17:20:37,240 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-12-08 17:20:37,241 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-12-08 17:20:37,241 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-12-08 17:20:37,241 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-12-08 17:20:37,242 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-12-08 17:20:37,242 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-12-08 17:20:37,243 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-12-08 17:20:37,243 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-12-08 17:20:37,243 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-12-08 17:20:37,243 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-12-08 17:20:37,244 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-12-08 17:20:37,244 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-12-08 17:20:37,244 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-12-08 17:20:37,244 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-12-08 17:20:37,245 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-12-08 17:20:37,245 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-12-08 17:20:37,252 INFO L110 SettingsManager]: Loading preferences was successful [2018-12-08 17:20:37,252 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-12-08 17:20:37,253 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-12-08 17:20:37,253 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-12-08 17:20:37,253 INFO L133 SettingsManager]: * Use SBE=true [2018-12-08 17:20:37,253 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-12-08 17:20:37,254 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-12-08 17:20:37,254 INFO L133 SettingsManager]: * Use old map elimination=false [2018-12-08 17:20:37,254 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-12-08 17:20:37,254 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-12-08 17:20:37,254 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-12-08 17:20:37,254 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-12-08 17:20:37,254 INFO L133 SettingsManager]: * sizeof long=4 [2018-12-08 17:20:37,254 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-12-08 17:20:37,254 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-12-08 17:20:37,254 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-12-08 17:20:37,254 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-12-08 17:20:37,255 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-12-08 17:20:37,255 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-12-08 17:20:37,255 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-12-08 17:20:37,255 INFO L133 SettingsManager]: * sizeof long double=12 [2018-12-08 17:20:37,255 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-12-08 17:20:37,255 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-12-08 17:20:37,255 INFO L133 SettingsManager]: * Use constant arrays=true [2018-12-08 17:20:37,255 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-12-08 17:20:37,255 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-12-08 17:20:37,255 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-12-08 17:20:37,255 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-12-08 17:20:37,256 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-12-08 17:20:37,256 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-12-08 17:20:37,256 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-12-08 17:20:37,256 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-12-08 17:20:37,256 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c6671d27cfc2bdc7710085525ce5a61867ea778d [2018-12-08 17:20:37,273 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-12-08 17:20:37,282 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-12-08 17:20:37,285 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-12-08 17:20:37,286 INFO L271 PluginConnector]: Initializing CDTParser... [2018-12-08 17:20:37,286 INFO L276 PluginConnector]: CDTParser initialized [2018-12-08 17:20:37,286 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product25_true-unreach-call_true-termination.cil.c [2018-12-08 17:20:37,321 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/data/e24a5c386/d423799b05604b5e964dea1e4e31973c/FLAG94a34b274 [2018-12-08 17:20:37,761 INFO L307 CDTParser]: Found 1 translation units. [2018-12-08 17:20:37,761 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/sv-benchmarks/c/product-lines/elevator_spec3_product25_true-unreach-call_true-termination.cil.c [2018-12-08 17:20:37,770 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/data/e24a5c386/d423799b05604b5e964dea1e4e31973c/FLAG94a34b274 [2018-12-08 17:20:37,778 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/data/e24a5c386/d423799b05604b5e964dea1e4e31973c [2018-12-08 17:20:37,780 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-12-08 17:20:37,780 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-12-08 17:20:37,781 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-12-08 17:20:37,781 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-12-08 17:20:37,783 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-12-08 17:20:37,783 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.12 05:20:37" (1/1) ... [2018-12-08 17:20:37,785 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1ca4a7aa and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 05:20:37, skipping insertion in model container [2018-12-08 17:20:37,785 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.12 05:20:37" (1/1) ... [2018-12-08 17:20:37,789 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-12-08 17:20:37,821 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-12-08 17:20:38,104 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-12-08 17:20:38,113 INFO L191 MainTranslator]: Completed pre-run [2018-12-08 17:20:38,181 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-12-08 17:20:38,207 INFO L195 MainTranslator]: Completed translation [2018-12-08 17:20:38,207 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 05:20:38 WrapperNode [2018-12-08 17:20:38,207 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-12-08 17:20:38,207 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-12-08 17:20:38,208 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-12-08 17:20:38,208 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-12-08 17:20:38,213 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 05:20:38" (1/1) ... [2018-12-08 17:20:38,228 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 05:20:38" (1/1) ... [2018-12-08 17:20:38,378 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-12-08 17:20:38,379 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-12-08 17:20:38,379 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-12-08 17:20:38,379 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-12-08 17:20:38,386 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 05:20:38" (1/1) ... [2018-12-08 17:20:38,387 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 05:20:38" (1/1) ... [2018-12-08 17:20:38,409 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 05:20:38" (1/1) ... [2018-12-08 17:20:38,409 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 05:20:38" (1/1) ... [2018-12-08 17:20:38,454 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 05:20:38" (1/1) ... [2018-12-08 17:20:38,506 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 05:20:38" (1/1) ... [2018-12-08 17:20:38,525 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 05:20:38" (1/1) ... [2018-12-08 17:20:38,556 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-12-08 17:20:38,557 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-12-08 17:20:38,557 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-12-08 17:20:38,557 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-12-08 17:20:38,558 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 05:20:38" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 17:20:38,594 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-12-08 17:20:38,594 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-12-08 17:20:38,595 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-12-08 17:20:38,595 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-12-08 17:20:43,742 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-12-08 17:20:43,742 INFO L280 CfgBuilder]: Removed 1467 assue(true) statements. [2018-12-08 17:20:43,743 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.12 05:20:43 BoogieIcfgContainer [2018-12-08 17:20:43,743 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-12-08 17:20:43,743 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-12-08 17:20:43,743 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-12-08 17:20:43,745 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-12-08 17:20:43,746 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-08 17:20:43,746 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 08.12 05:20:37" (1/3) ... [2018-12-08 17:20:43,747 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@2a81ad8c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 08.12 05:20:43, skipping insertion in model container [2018-12-08 17:20:43,747 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-08 17:20:43,747 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 05:20:38" (2/3) ... [2018-12-08 17:20:43,747 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@2a81ad8c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 08.12 05:20:43, skipping insertion in model container [2018-12-08 17:20:43,747 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-08 17:20:43,747 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.12 05:20:43" (3/3) ... [2018-12-08 17:20:43,748 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product25_true-unreach-call_true-termination.cil.c [2018-12-08 17:20:43,780 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-12-08 17:20:43,780 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-12-08 17:20:43,780 INFO L375 BuchiCegarLoop]: Hoare is false [2018-12-08 17:20:43,780 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-12-08 17:20:43,781 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-12-08 17:20:43,781 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-12-08 17:20:43,781 INFO L379 BuchiCegarLoop]: Difference is false [2018-12-08 17:20:43,781 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-12-08 17:20:43,781 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-12-08 17:20:43,829 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6333 states. [2018-12-08 17:20:43,900 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1284 [2018-12-08 17:20:43,900 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:20:43,900 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:20:43,912 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:20:43,912 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:20:43,912 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-12-08 17:20:43,912 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6333 states. [2018-12-08 17:20:43,947 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1284 [2018-12-08 17:20:43,947 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:20:43,947 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:20:43,950 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:20:43,950 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:20:43,955 INFO L794 eck$LassoCheckResult]: Stem: 1212#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 5753#L-1true havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 860#L1098true havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 707#L1106true main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 1044#L1462true assume 0 != main_~tmp~11; 5544#L1438true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4171#L487true havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1131#L3282true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 4067#L3307true bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 887#L765true assume 0 == initPersonOnFloor_~floor; 234#L766true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3591#L873-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5549#L557true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 866#L569-2true havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 12#L1832true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1442#L1884true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 302#L3076true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 374#L3077true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2108#L1849true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1185#L1870true __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2027#L3081true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6246#L3182true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4816#L494true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3575#L521true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3033#L2445true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3684#L2457true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4414#L2596true assume !(0 != timeShift_~tmp___9~2); 807#L2687true assume !(1 == ~doorState~0); 738#L2687-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2621#L2036true assume !(1 == stopRequestedInDirection_~dir); 1953#L2205true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 75#L2358true timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1050#L2695true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1461#L2412true assume !(1 == ~currentHeading~0); 4326#L2422true assume !(0 == ~currentFloorID~0); 4308#L2422-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4089#L2428-5true havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5493#L3207true assume !(-1 == ~expectedDirection~0); 673#L3219true assume !(1 == ~expectedDirection~0); 705#L3220true havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 10#L1832-1true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1434#L1884-3true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 300#L3076-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 367#L3077-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2091#L1849-11true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1174#L1870-11true __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2028#L3081-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6244#L3182-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4956#L494-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3526#L521-21true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3039#L2445-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3687#L2457-1true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4411#L2596-1true assume !(0 != timeShift_~tmp___9~2); 741#L2687-3true assume !(1 == ~doorState~0); 742#L2687-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2622#L2036-2true assume !(1 == stopRequestedInDirection_~dir); 1956#L2205-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 111#L2358-2true timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1054#L2695-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1450#L2412-3true assume !(1 == ~currentHeading~0); 4295#L2422-9true assume !(0 == ~currentFloorID~0); 4297#L2422-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5052#L2428-11true havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5502#L3207-1true assume !(-1 == ~expectedDirection~0); 672#L3219-1true assume !(1 == ~expectedDirection~0); 708#L3220-1true havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 15#L1832-2true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1437#L1884-6true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 303#L3076-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4895#L3138-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2054#L1849-27true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1238#L1870-27true __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 4467#L3142-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 6251#L3182-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4885#L494-42true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3677#L521-42true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3036#L2445-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3685#L2457-2true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4415#L2596-2true assume !(0 != timeShift_~tmp___9~2); 735#L2687-6true assume 1 == ~doorState~0;~doorState~0 := 0; 736#L2687-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2633#L2036-4true assume !(1 == stopRequestedInDirection_~dir); 1933#L2205-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 112#L2358-4true timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1056#L2695-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1454#L2412-6true assume !(1 == ~currentHeading~0); 4269#L2422-18true assume !(0 == ~currentFloorID~0); 4272#L2422-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5040#L2428-17true havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5498#L3207-2true assume !(-1 == ~expectedDirection~0); 676#L3219-2true assume !(1 == ~expectedDirection~0); 704#L3220-2true havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1136#L3282-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 4062#L3307-1true bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 888#L765-1true assume 0 == initPersonOnFloor_~floor; 235#L766-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3593#L873-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5550#L557-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 861#L569-5true havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 21#L1832-3true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1426#L1884-9true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 305#L3076-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 369#L3077-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2046#L1849-33true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1232#L1870-33true __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2022#L3081-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6254#L3182-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4736#L494-63true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3625#L521-63true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3044#L2445-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3688#L2457-3true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4417#L2596-3true assume !(0 != timeShift_~tmp___9~2); 737#L2687-9true assume !(1 == ~doorState~0); 733#L2687-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2606#L2036-6true assume !(1 == stopRequestedInDirection_~dir); 1938#L2205-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 118#L2358-6true timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1040#L2695-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1444#L2412-9true assume !(1 == ~currentHeading~0); 4136#L2422-27true assume !(0 == ~currentFloorID~0); 4126#L2422-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5034#L2428-23true havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5481#L3207-3true assume !(-1 == ~expectedDirection~0); 674#L3219-3true assume !(1 == ~expectedDirection~0); 714#L3220-3true cleanup_~i~0 := 0; 5532#L1268-2true [2018-12-08 17:20:43,956 INFO L796 eck$LassoCheckResult]: Loop: 5532#L1268-2true assume !false; 5511#L1269true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 5418#L1272true assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 659#L1659true cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 776#L1276true assume 1 != cleanup_~tmp___0~0; 777#L1276-1true havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4659#L494-84true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5896#L521-84true anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 5732#L1940true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 156#L2004true isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 460#L2017true cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 1017#L1288true assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 5#L1832-4true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1433#L1884-12true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 309#L3076-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 371#L3077-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1909#L1849-44true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1219#L1870-44true __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2025#L3081-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6250#L3182-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4642#L494-89true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5879#L521-89true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3016#L2445-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3691#L2457-4true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4421#L2596-4true assume !(0 != timeShift_~tmp___9~2); 732#L2687-12true assume 1 == ~doorState~0;~doorState~0 := 0; 734#L2687-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2615#L2036-8true assume !(1 == stopRequestedInDirection_~dir); 1947#L2205-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 106#L2358-8true timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1038#L2695-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1449#L2412-12true assume !(1 == ~currentHeading~0); 4120#L2422-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4124#L2422-38true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5022#L2428-29true havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5483#L3207-4true assume !(-1 == ~expectedDirection~0); 675#L3219-4true assume !(1 == ~expectedDirection~0); 710#L3220-4true cleanup_~i~0 := 1 + cleanup_~i~0; 5532#L1268-2true [2018-12-08 17:20:43,961 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:20:43,962 INFO L82 PathProgramCache]: Analyzing trace with hash 1753801770, now seen corresponding path program 1 times [2018-12-08 17:20:43,963 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:20:43,964 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:20:44,000 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:44,000 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:20:44,000 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:44,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:20:44,180 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:20:44,181 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:20:44,181 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:20:44,184 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:20:44,184 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:20:44,184 INFO L82 PathProgramCache]: Analyzing trace with hash -1641855536, now seen corresponding path program 1 times [2018-12-08 17:20:44,184 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:20:44,185 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:20:44,185 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:44,185 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:20:44,185 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:44,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:20:44,234 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:20:44,235 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:20:44,235 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-12-08 17:20:44,236 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:20:44,245 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-12-08 17:20:44,245 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-12-08 17:20:44,247 INFO L87 Difference]: Start difference. First operand 6333 states. Second operand 6 states. [2018-12-08 17:20:47,286 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:20:47,286 INFO L93 Difference]: Finished difference Result 15945 states and 29782 transitions. [2018-12-08 17:20:47,287 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-12-08 17:20:47,288 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15945 states and 29782 transitions. [2018-12-08 17:20:47,379 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3685 [2018-12-08 17:20:47,430 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15945 states to 15875 states and 29701 transitions. [2018-12-08 17:20:47,431 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15875 [2018-12-08 17:20:47,441 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15875 [2018-12-08 17:20:47,442 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15875 states and 29701 transitions. [2018-12-08 17:20:47,461 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:20:47,461 INFO L705 BuchiCegarLoop]: Abstraction has 15875 states and 29701 transitions. [2018-12-08 17:20:47,484 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15875 states and 29701 transitions. [2018-12-08 17:20:47,619 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15875 to 10593. [2018-12-08 17:20:47,620 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10593 states. [2018-12-08 17:20:47,631 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10593 states to 10593 states and 19828 transitions. [2018-12-08 17:20:47,632 INFO L728 BuchiCegarLoop]: Abstraction has 10593 states and 19828 transitions. [2018-12-08 17:20:47,632 INFO L608 BuchiCegarLoop]: Abstraction has 10593 states and 19828 transitions. [2018-12-08 17:20:47,632 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-12-08 17:20:47,632 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10593 states and 19828 transitions. [2018-12-08 17:20:47,655 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2373 [2018-12-08 17:20:47,655 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:20:47,655 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:20:47,658 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:20:47,658 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:20:47,658 INFO L794 eck$LassoCheckResult]: Stem: 24000#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 24001#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 23613#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 23418#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 23419#L1462 assume 0 != main_~tmp~11; 23773#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 27404#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 23867#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 23851#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 23638#L765 assume 0 == initPersonOnFloor_~floor; 22711#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 22341#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 26854#L557 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 23618#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 22335#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 22336#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 22836#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 22837#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 23024#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 23947#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 23948#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 23990#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 27855#L494 assume !(0 == isFloorCalling_~floorID); 27831#L498 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 25748#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26117#L2445 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26118#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 26953#L2596 assume !(0 != timeShift_~tmp___9~2); 23556#L2687 assume !(1 == ~doorState~0); 23462#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23463#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 25590#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 25425#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 22517#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 22518#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 23775#L2412 assume !(1 == ~currentHeading~0); 24425#L2422 assume !(0 == ~currentFloorID~0); 24360#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 27301#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 27302#L3207 assume !(-1 == ~expectedDirection~0); 23342#L3219 assume !(1 == ~expectedDirection~0); 23343#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 22330#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 22331#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 22830#L3076-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 22831#L3077-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 23006#L3087-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 24697#L1849-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 23929#L1870-12 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 23930#L3092-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 28835#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 28836#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 25636#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26125#L2445-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26126#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 26956#L2596-1 assume !(0 != timeShift_~tmp___9~2); 23466#L2687-3 assume !(1 == ~doorState~0); 23467#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23468#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 25591#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 32801#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 32800#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 24404#L2412-3 assume !(1 == ~currentHeading~0); 24405#L2422-9 assume !(0 == ~currentFloorID~0); 24331#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23373#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 27976#L3207-1 assume !(-1 == ~expectedDirection~0); 23339#L3219-1 assume !(1 == ~expectedDirection~0); 23340#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 22343#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 22344#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 22839#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 22840#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 26377#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 26378#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 27071#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 28810#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 23981#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 27892#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 25932#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26121#L2445-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26122#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 26954#L2596-2 assume !(0 != timeShift_~tmp___9~2); 23458#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 23459#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23460#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 25605#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 22568#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 22569#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 23781#L2412-6 assume !(1 == ~currentHeading~0); 24413#L2422-18 assume !(0 == ~currentFloorID~0); 24292#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23358#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 27973#L3207-2 assume !(-1 == ~expectedDirection~0); 23351#L3219-2 assume !(1 == ~expectedDirection~0); 23352#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 23415#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 23848#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 23640#L765-1 assume 0 == initPersonOnFloor_~floor; 22712#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 22355#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 26856#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 23614#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 22360#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 22361#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 22845#L3076-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 22846#L3077-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 23010#L3087-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 24716#L1849-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 24040#L1870-34 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 24041#L3092-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 23950#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 28841#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 25871#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26131#L2445-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26132#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 26957#L2596-3 assume !(0 != timeShift_~tmp___9~2); 23461#L2687-9 assume !(1 == ~doorState~0); 23455#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23456#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 25575#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 32653#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 32651#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 32652#L2412-9 assume !(1 == ~currentHeading~0); 32872#L2422-27 assume !(0 == ~currentFloorID~0); 24290#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23361#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 27969#L3207-3 assume !(-1 == ~expectedDirection~0); 23345#L3219-3 assume !(1 == ~expectedDirection~0); 23346#L3220-3 cleanup_~i~0 := 0; 23422#L1268-2 [2018-12-08 17:20:47,659 INFO L796 eck$LassoCheckResult]: Loop: 23422#L1268-2 assume !false; 28440#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 28376#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 23320#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 23321#L1276 assume 1 != cleanup_~tmp___0~0; 23508#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 23509#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 26309#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 28635#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 22622#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 22623#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 23184#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 22316#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 22317#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 22857#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 22858#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 26535#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 26536#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 27148#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 28678#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 23954#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 28839#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 26283#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26099#L2445-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26100#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 26960#L2596-4 assume !(0 != timeShift_~tmp___9~2); 23453#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 23454#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23457#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 25583#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 22556#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 22557#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 23770#L2412-12 assume !(1 == ~currentHeading~0); 24402#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 24247#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23356#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 27968#L3207-4 assume !(-1 == ~expectedDirection~0); 23348#L3219-4 assume !(1 == ~expectedDirection~0); 23350#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 23422#L1268-2 [2018-12-08 17:20:47,659 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:20:47,659 INFO L82 PathProgramCache]: Analyzing trace with hash -792771756, now seen corresponding path program 1 times [2018-12-08 17:20:47,659 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:20:47,659 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:20:47,660 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:47,660 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:20:47,660 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:47,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:20:47,705 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:20:47,705 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:20:47,705 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:20:47,705 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:20:47,705 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:20:47,706 INFO L82 PathProgramCache]: Analyzing trace with hash 2074388433, now seen corresponding path program 1 times [2018-12-08 17:20:47,706 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:20:47,706 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:20:47,706 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:47,706 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:20:47,706 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:47,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:20:47,737 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:20:47,737 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:20:47,737 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-12-08 17:20:47,737 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:20:47,738 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-12-08 17:20:47,738 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-12-08 17:20:47,738 INFO L87 Difference]: Start difference. First operand 10593 states and 19828 transitions. cyclomatic complexity: 9236 Second operand 6 states. [2018-12-08 17:20:48,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:20:48,032 INFO L93 Difference]: Finished difference Result 19159 states and 35934 transitions. [2018-12-08 17:20:48,032 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-12-08 17:20:48,032 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 19159 states and 35934 transitions. [2018-12-08 17:20:48,163 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4378 [2018-12-08 17:20:48,204 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 19159 states to 19159 states and 35934 transitions. [2018-12-08 17:20:48,204 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 19159 [2018-12-08 17:20:48,213 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 19159 [2018-12-08 17:20:48,213 INFO L73 IsDeterministic]: Start isDeterministic. Operand 19159 states and 35934 transitions. [2018-12-08 17:20:48,223 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:20:48,224 INFO L705 BuchiCegarLoop]: Abstraction has 19159 states and 35934 transitions. [2018-12-08 17:20:48,235 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19159 states and 35934 transitions. [2018-12-08 17:20:48,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19159 to 10611. [2018-12-08 17:20:48,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10611 states. [2018-12-08 17:20:48,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10611 states to 10611 states and 19846 transitions. [2018-12-08 17:20:48,347 INFO L728 BuchiCegarLoop]: Abstraction has 10611 states and 19846 transitions. [2018-12-08 17:20:48,347 INFO L608 BuchiCegarLoop]: Abstraction has 10611 states and 19846 transitions. [2018-12-08 17:20:48,347 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-12-08 17:20:48,347 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10611 states and 19846 transitions. [2018-12-08 17:20:48,367 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2377 [2018-12-08 17:20:48,367 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:20:48,367 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:20:48,369 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:20:48,370 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:20:48,370 INFO L794 eck$LassoCheckResult]: Stem: 53776#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 53777#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 53389#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 53196#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 53197#L1462 assume 0 != main_~tmp~11; 53554#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 57140#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 53648#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 53632#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 53416#L765 assume 0 == initPersonOnFloor_~floor; 52491#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 52123#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 56611#L557 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 53394#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 52117#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 52118#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 52616#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 52617#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 52803#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 53728#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 53729#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 53766#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 57578#L494 assume !(0 == isFloorCalling_~floorID); 57557#L498 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 55513#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 55884#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 54992#L1849-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 53708#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 53709#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 56917#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 59126#L2596 assume !(0 != timeShift_~tmp___9~2); 53332#L2687 assume !(1 == ~doorState~0); 53239#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 53240#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 55358#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 55190#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 52299#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 52300#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 53556#L2412 assume !(1 == ~currentHeading~0); 54193#L2422 assume !(0 == ~currentFloorID~0); 54130#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 57039#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 57040#L3207 assume !(-1 == ~expectedDirection~0); 59104#L3219 assume !(1 == ~expectedDirection~0); 59102#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 59101#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 59090#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 59085#L3076-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 59078#L3077-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 59075#L3087-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 59045#L1849-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 59028#L1870-12 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 59021#L3092-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 59014#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 59009#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 59006#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 59001#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 58989#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 58983#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 58981#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 58980#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 58978#L2596-1 assume !(0 != timeShift_~tmp___9~2); 58977#L2687-3 assume !(1 == ~doorState~0); 58904#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 58902#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 58901#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 58859#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 58857#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 58856#L2412-3 assume !(1 == ~currentHeading~0); 58855#L2422-9 assume !(0 == ~currentFloorID~0); 54101#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53152#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 57684#L3207-1 assume !(-1 == ~expectedDirection~0); 53118#L3219-1 assume !(1 == ~expectedDirection~0); 53119#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 52125#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 52126#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 52619#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 52620#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 56147#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 56148#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 56816#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 58339#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 58769#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 58767#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 58763#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 58762#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 58760#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 58756#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 58754#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 58753#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 58752#L2596-2 assume !(0 != timeShift_~tmp___9~2); 58747#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 58745#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 58744#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 58700#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 58688#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 58685#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 58686#L2412-6 assume !(1 == ~currentHeading~0); 58844#L2422-18 assume !(0 == ~currentFloorID~0); 54062#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53137#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 57683#L3207-2 assume !(-1 == ~expectedDirection~0); 53130#L3219-2 assume !(1 == ~expectedDirection~0); 53131#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 53193#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 53629#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 53418#L765-1 assume 0 == initPersonOnFloor_~floor; 52492#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 52137#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 56613#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 53398#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 59168#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 59167#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 59165#L3076-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 59166#L3077-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 59164#L3087-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 59159#L1849-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 59154#L1870-34 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 59137#L3092-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 58807#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 58800#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 58796#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 58795#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 58793#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 58789#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 58787#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 58786#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 58784#L2596-3 assume !(0 != timeShift_~tmp___9~2); 58783#L2687-9 assume !(1 == ~doorState~0); 58778#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 58776#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 58578#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 58555#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 58552#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 58550#L2412-9 assume !(1 == ~currentHeading~0); 58548#L2422-27 assume !(0 == ~currentFloorID~0); 54060#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53140#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 57682#L3207-3 assume !(-1 == ~expectedDirection~0); 53124#L3219-3 assume !(1 == ~expectedDirection~0); 53125#L3220-3 cleanup_~i~0 := 0; 53200#L1268-2 [2018-12-08 17:20:48,370 INFO L796 eck$LassoCheckResult]: Loop: 53200#L1268-2 assume !false; 58137#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 58067#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 53099#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 53100#L1276 assume 1 != cleanup_~tmp___0~0; 53284#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 53285#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 56078#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 58334#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 52403#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 52404#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 52963#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 59194#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 59193#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 59191#L3076-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 59190#L3077-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 59189#L3087-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 59188#L1849-45 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 59183#L1870-45 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 59172#L3092-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 58834#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 58833#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 58828#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 58826#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 58825#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 58819#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 58818#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 58817#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 58816#L2596-4 assume !(0 != timeShift_~tmp___9~2); 58814#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 58812#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 58809#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 58564#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 58554#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 58551#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 58549#L2412-12 assume !(1 == ~currentHeading~0); 58547#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 54017#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53135#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 57681#L3207-4 assume !(-1 == ~expectedDirection~0); 53127#L3219-4 assume !(1 == ~expectedDirection~0); 53129#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 53200#L1268-2 [2018-12-08 17:20:48,374 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:20:48,374 INFO L82 PathProgramCache]: Analyzing trace with hash 2035875413, now seen corresponding path program 1 times [2018-12-08 17:20:48,375 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:20:48,375 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:20:48,375 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:48,375 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:20:48,375 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:48,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:20:48,431 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:20:48,431 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:20:48,431 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:20:48,432 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:20:48,432 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:20:48,432 INFO L82 PathProgramCache]: Analyzing trace with hash 1659710398, now seen corresponding path program 1 times [2018-12-08 17:20:48,432 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:20:48,432 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:20:48,432 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:48,433 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:20:48,433 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:48,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:20:48,465 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:20:48,465 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:20:48,465 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 17:20:48,465 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:20:48,465 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 17:20:48,465 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 17:20:48,465 INFO L87 Difference]: Start difference. First operand 10611 states and 19846 transitions. cyclomatic complexity: 9236 Second operand 5 states. [2018-12-08 17:20:49,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:20:49,158 INFO L93 Difference]: Finished difference Result 20678 states and 38600 transitions. [2018-12-08 17:20:49,158 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-08 17:20:49,158 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20678 states and 38600 transitions. [2018-12-08 17:20:49,206 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4647 [2018-12-08 17:20:49,257 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20678 states to 20678 states and 38600 transitions. [2018-12-08 17:20:49,257 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20678 [2018-12-08 17:20:49,268 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20678 [2018-12-08 17:20:49,268 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20678 states and 38600 transitions. [2018-12-08 17:20:49,280 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:20:49,280 INFO L705 BuchiCegarLoop]: Abstraction has 20678 states and 38600 transitions. [2018-12-08 17:20:49,293 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20678 states and 38600 transitions. [2018-12-08 17:20:49,384 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20678 to 10611. [2018-12-08 17:20:49,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10611 states. [2018-12-08 17:20:49,394 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10611 states to 10611 states and 19790 transitions. [2018-12-08 17:20:49,394 INFO L728 BuchiCegarLoop]: Abstraction has 10611 states and 19790 transitions. [2018-12-08 17:20:49,394 INFO L608 BuchiCegarLoop]: Abstraction has 10611 states and 19790 transitions. [2018-12-08 17:20:49,394 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-12-08 17:20:49,394 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10611 states and 19790 transitions. [2018-12-08 17:20:49,411 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2377 [2018-12-08 17:20:49,411 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:20:49,411 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:20:49,413 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:20:49,413 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:20:49,414 INFO L794 eck$LassoCheckResult]: Stem: 85081#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 85082#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 84694#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 84502#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 84503#L1462 assume 0 != main_~tmp~11; 84858#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 88487#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 84952#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 84936#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 84721#L765 assume 0 == initPersonOnFloor_~floor; 83799#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 83430#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 87949#L557 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 84699#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 83427#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 83428#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 83921#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 83922#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 84113#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 85032#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 85033#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 85071#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 88922#L494 assume !(0 == isFloorCalling_~floorID); 88897#L498 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 86848#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 87219#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 86326#L1849-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 85012#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 85013#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 88257#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 91962#L2596 assume !(0 != timeShift_~tmp___9~2); 84637#L2687 assume !(1 == ~doorState~0); 84546#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 84547#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 86693#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 86526#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 83606#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 83607#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 84860#L2412 assume !(1 == ~currentHeading~0); 85509#L2422 assume !(0 == ~currentFloorID~0); 85439#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 88381#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 88382#L3207 assume !(-1 == ~expectedDirection~0); 84428#L3219 assume !(1 == ~expectedDirection~0); 84429#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 83419#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 83420#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 83915#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 83917#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 87488#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 87489#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 88152#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 89674#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 85058#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 88998#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 86736#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 87229#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 87231#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 91314#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 91313#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 91312#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 91311#L2596-1 assume !(0 != timeShift_~tmp___9~2); 91310#L2687-3 assume !(1 == ~doorState~0); 91307#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 91280#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 91273#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 91253#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 91249#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 91247#L2412-3 assume !(1 == ~currentHeading~0); 90499#L2422-9 assume !(0 == ~currentFloorID~0); 85410#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 84457#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 89021#L3207-1 assume !(-1 == ~expectedDirection~0); 84425#L3219-1 assume !(1 == ~expectedDirection~0); 84426#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 83432#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 83433#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 83924#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 83925#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 91456#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 91455#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 91453#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 91433#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 91431#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 91429#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 91425#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 91424#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 91422#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 91418#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 91412#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 91410#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 91409#L2596-2 assume !(0 != timeShift_~tmp___9~2); 91408#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 91407#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 91405#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 90152#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 90141#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 90139#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 90140#L2412-6 assume !(1 == ~currentHeading~0); 90494#L2422-18 assume !(0 == ~currentFloorID~0); 85371#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 88432#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 90166#L3207-2 assume !(-1 == ~expectedDirection~0); 90163#L3219-2 assume !(1 == ~expectedDirection~0); 90161#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 90133#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 90128#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 90107#L765-1 assume 0 == initPersonOnFloor_~floor; 90090#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 90070#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 90067#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 90062#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 90060#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 90058#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 90056#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 90051#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 90049#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 90031#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 90029#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 89997#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 89994#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 89990#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 89985#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 89974#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 89972#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 89968#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 89966#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 89961#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 89958#L2596-3 assume !(0 != timeShift_~tmp___9~2); 89957#L2687-9 assume !(1 == ~doorState~0); 89956#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 89955#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 89919#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 89909#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 89905#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 89904#L2412-9 assume !(1 == ~currentHeading~0); 89902#L2422-27 assume !(0 == ~currentFloorID~0); 85369#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 88418#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 89019#L3207-3 assume !(-1 == ~expectedDirection~0); 84431#L3219-3 assume !(1 == ~expectedDirection~0); 84432#L3220-3 cleanup_~i~0 := 0; 92351#L1268-2 [2018-12-08 17:20:49,414 INFO L796 eck$LassoCheckResult]: Loop: 92351#L1268-2 assume !false; 92350#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 92349#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 90471#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 90470#L1276 assume 1 != cleanup_~tmp___0~0; 90469#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 90463#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 90458#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 90433#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 90428#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 90426#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 90424#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 90419#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 90417#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 90415#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 90414#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 90413#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 90412#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 90411#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 90380#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 90377#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 90375#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 90370#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 90369#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 90368#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 90363#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 90362#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 90361#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 90356#L2596-4 assume !(0 != timeShift_~tmp___9~2); 90354#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 90353#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 90352#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 90043#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 90030#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 90028#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 89901#L2412-12 assume !(1 == ~currentHeading~0); 89883#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 85326#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 88414#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 89017#L3207-4 assume !(-1 == ~expectedDirection~0); 84434#L3219-4 assume !(1 == ~expectedDirection~0); 84436#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 92351#L1268-2 [2018-12-08 17:20:49,414 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:20:49,414 INFO L82 PathProgramCache]: Analyzing trace with hash -513296043, now seen corresponding path program 1 times [2018-12-08 17:20:49,414 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:20:49,414 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:20:49,417 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:49,417 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:20:49,417 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:49,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:20:49,454 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:20:49,454 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:20:49,454 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:20:49,454 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:20:49,454 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:20:49,454 INFO L82 PathProgramCache]: Analyzing trace with hash -399206906, now seen corresponding path program 1 times [2018-12-08 17:20:49,454 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:20:49,454 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:20:49,455 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:49,455 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:20:49,455 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:49,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:20:49,480 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:20:49,481 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:20:49,481 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-08 17:20:49,481 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:20:49,481 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-12-08 17:20:49,481 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-12-08 17:20:49,482 INFO L87 Difference]: Start difference. First operand 10611 states and 19790 transitions. cyclomatic complexity: 9180 Second operand 7 states. [2018-12-08 17:20:51,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:20:51,798 INFO L93 Difference]: Finished difference Result 66066 states and 123606 transitions. [2018-12-08 17:20:51,799 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2018-12-08 17:20:51,799 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66066 states and 123606 transitions. [2018-12-08 17:20:51,968 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23914 [2018-12-08 17:20:52,112 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66066 states to 66066 states and 123606 transitions. [2018-12-08 17:20:52,113 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 66066 [2018-12-08 17:20:52,149 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 66066 [2018-12-08 17:20:52,149 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66066 states and 123606 transitions. [2018-12-08 17:20:52,181 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:20:52,181 INFO L705 BuchiCegarLoop]: Abstraction has 66066 states and 123606 transitions. [2018-12-08 17:20:52,213 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66066 states and 123606 transitions. [2018-12-08 17:20:52,438 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66066 to 21183. [2018-12-08 17:20:52,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 21183 states. [2018-12-08 17:20:52,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21183 states to 21183 states and 39497 transitions. [2018-12-08 17:20:52,641 INFO L728 BuchiCegarLoop]: Abstraction has 21183 states and 39497 transitions. [2018-12-08 17:20:52,641 INFO L608 BuchiCegarLoop]: Abstraction has 21183 states and 39497 transitions. [2018-12-08 17:20:52,641 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-12-08 17:20:52,641 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 21183 states and 39497 transitions. [2018-12-08 17:20:52,668 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4764 [2018-12-08 17:20:52,668 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:20:52,668 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:20:52,670 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:20:52,670 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:20:52,670 INFO L794 eck$LassoCheckResult]: Stem: 161836#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 161837#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 161435#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 161238#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 161239#L1462 assume 0 != main_~tmp~11; 161600#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 165378#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 161703#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 161687#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 161463#L765 assume 0 == initPersonOnFloor_~floor; 160527#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 160159#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 164773#L557 assume !(0 == callOnFloor_~floorID); 166597#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 161441#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 167953#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 167952#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 167950#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 167948#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 167949#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 167978#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 167927#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 167921#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 167920#L494 assume !(0 == isFloorCalling_~floorID); 165857#L498 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 163637#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 164007#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 164009#L1849-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 167884#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 167883#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 167882#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 167881#L2596 assume !(0 != timeShift_~tmp___9~2); 167880#L2687 assume !(1 == ~doorState~0); 167879#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 167877#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 167876#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 163296#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 160335#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 160336#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 161603#L2412 assume !(1 == ~currentHeading~0); 162267#L2422 assume !(0 == ~currentFloorID~0); 162201#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 165472#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 168378#L3207 assume !(-1 == ~expectedDirection~0); 168375#L3219 assume !(1 == ~expectedDirection~0); 168373#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 168371#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 168369#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 168367#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 168366#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 168361#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 168360#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 168346#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 168340#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 168334#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 168333#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 163524#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 168332#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 163060#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 161741#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 161742#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 165136#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 170178#L2596-1 assume !(0 != timeShift_~tmp___9~2); 161287#L2687-3 assume !(1 == ~doorState~0); 161288#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 161289#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 163477#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 170082#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 161605#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 161607#L2412-3 assume !(1 == ~currentHeading~0); 162247#L2422-9 assume !(0 == ~currentFloorID~0); 162172#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 165464#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 170277#L3207-1 assume !(-1 == ~expectedDirection~0); 170272#L3219-1 assume !(1 == ~expectedDirection~0); 170268#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 170264#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 170261#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 170256#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 170252#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 170222#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 170217#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 170203#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 170188#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 167454#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 167452#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 167448#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 167447#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 167445#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 167441#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 167439#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 167438#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 167434#L2596-2 assume !(0 != timeShift_~tmp___9~2); 167433#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 167430#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 167426#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 167385#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 167374#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 167373#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 162254#L2412-6 assume !(1 == ~currentHeading~0); 162255#L2422-18 assume !(0 == ~currentFloorID~0); 170353#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 170346#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 170344#L3207-2 assume !(-1 == ~expectedDirection~0); 170341#L3219-2 assume !(1 == ~expectedDirection~0); 170339#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 170335#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 170332#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 170331#L765-1 assume 0 == initPersonOnFloor_~floor; 170316#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 170291#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 170290#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 161436#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 161437#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 174099#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 174098#L3076-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 174097#L3077-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 160825#L1849-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 162538#L1870-33 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 178107#L3081-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 174000#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 165837#L494-63 assume !(0 == isFloorCalling_~floorID); 165838#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 164817#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 164818#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 162913#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 162831#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 165139#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 165141#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 168281#L2596-3 assume !(0 != timeShift_~tmp___9~2); 161281#L2687-9 assume !(1 == ~doorState~0); 161282#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 179290#L2036-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 166978#L1068-15 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 166979#L2040-6 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 179158#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 179256#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 179257#L2412-9 assume !(1 == ~currentHeading~0); 179247#L2422-27 assume !(0 == ~currentFloorID~0); 179064#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 179059#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 179057#L3207-3 assume !(-1 == ~expectedDirection~0); 179054#L3219-3 assume !(1 == ~expectedDirection~0); 179052#L3220-3 cleanup_~i~0 := 0; 179050#L1268-2 [2018-12-08 17:20:52,671 INFO L796 eck$LassoCheckResult]: Loop: 179050#L1268-2 assume !false; 179049#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 179048#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 179047#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 179046#L1276 assume 1 != cleanup_~tmp___0~0; 161329#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 161330#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 178083#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 166803#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 160438#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 160439#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 160999#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 160134#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 160135#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 160668#L3076-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 160670#L3077-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 177026#L1849-44 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 177071#L1870-44 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 176941#L3081-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 162001#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 174081#L494-89 assume !(0 == isFloorCalling_~floorID); 174072#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 174071#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 174065#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 174067#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 174057#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 174058#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 174052#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 174053#L2596-4 assume !(0 != timeShift_~tmp___9~2); 176933#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 174046#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 174047#L2036-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 174016#L1068-20 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 174017#L2040-8 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 180216#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 180261#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 180260#L2412-12 assume !(1 == ~currentHeading~0); 165308#L2422-36 assume !(0 == ~currentFloorID~0); 162080#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 180188#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 180186#L3207-4 assume !(-1 == ~expectedDirection~0); 180183#L3219-4 assume !(1 == ~expectedDirection~0); 179051#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 179050#L1268-2 [2018-12-08 17:20:52,676 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:20:52,677 INFO L82 PathProgramCache]: Analyzing trace with hash 2050563140, now seen corresponding path program 1 times [2018-12-08 17:20:52,677 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:20:52,677 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:20:52,677 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:52,677 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:20:52,677 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:52,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:20:52,730 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:20:52,730 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:20:52,730 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:20:52,730 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:20:52,730 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:20:52,730 INFO L82 PathProgramCache]: Analyzing trace with hash 87600517, now seen corresponding path program 1 times [2018-12-08 17:20:52,730 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:20:52,730 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:20:52,731 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:52,731 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:20:52,731 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:52,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:20:52,755 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:20:52,755 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:20:52,755 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-12-08 17:20:52,755 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:20:52,756 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-12-08 17:20:52,756 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-12-08 17:20:52,756 INFO L87 Difference]: Start difference. First operand 21183 states and 39497 transitions. cyclomatic complexity: 18315 Second operand 6 states. [2018-12-08 17:20:55,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:20:55,535 INFO L93 Difference]: Finished difference Result 41427 states and 76863 transitions. [2018-12-08 17:20:55,536 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-12-08 17:20:55,536 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41427 states and 76863 transitions. [2018-12-08 17:20:55,749 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9906 [2018-12-08 17:20:55,809 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41427 states to 41427 states and 76863 transitions. [2018-12-08 17:20:55,809 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 41427 [2018-12-08 17:20:55,826 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 41427 [2018-12-08 17:20:55,826 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41427 states and 76863 transitions. [2018-12-08 17:20:55,841 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:20:55,841 INFO L705 BuchiCegarLoop]: Abstraction has 41427 states and 76863 transitions. [2018-12-08 17:20:55,855 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41427 states and 76863 transitions. [2018-12-08 17:20:56,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41427 to 29031. [2018-12-08 17:20:56,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 29031 states. [2018-12-08 17:20:56,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29031 states to 29031 states and 53925 transitions. [2018-12-08 17:20:56,053 INFO L728 BuchiCegarLoop]: Abstraction has 29031 states and 53925 transitions. [2018-12-08 17:20:56,053 INFO L608 BuchiCegarLoop]: Abstraction has 29031 states and 53925 transitions. [2018-12-08 17:20:56,053 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-12-08 17:20:56,053 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29031 states and 53925 transitions. [2018-12-08 17:20:56,107 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6836 [2018-12-08 17:20:56,107 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:20:56,107 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:20:56,109 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:20:56,109 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:20:56,109 INFO L794 eck$LassoCheckResult]: Stem: 224470#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 224471#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 224071#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 223878#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 223879#L1462 assume 0 != main_~tmp~11; 224232#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 228067#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 224334#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 224316#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 224097#L765 assume 0 == initPersonOnFloor_~floor; 223169#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 222798#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 227464#L557 assume !(0 == callOnFloor_~floorID); 229297#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 224076#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 235271#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 235270#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 235269#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 223480#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 223482#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 224418#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 224419#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 229812#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 229813#L494 assume !(0 == isFloorCalling_~floorID); 228578#L498 assume !(1 == isFloorCalling_~floorID); 228579#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 227436#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 227437#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 225755#L1849-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 224398#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 224399#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 227833#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 229857#L2596 assume !(0 != timeShift_~tmp___9~2); 224014#L2687 assume !(1 == ~doorState~0); 223921#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 223922#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 226153#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 229815#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 222974#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 222975#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 224925#L2412 assume !(1 == ~currentHeading~0); 224926#L2422 assume !(0 == ~currentFloorID~0); 228176#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 228162#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 236334#L3207 assume !(-1 == ~expectedDirection~0); 223800#L3219 assume !(1 == ~expectedDirection~0); 223801#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 222790#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 222791#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 236247#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 236248#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 236244#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 236231#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 236216#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 236210#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 236204#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 236195#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 236193#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 236189#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 236191#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 236194#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 236192#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 236187#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 236188#L2596-1 assume !(0 != timeShift_~tmp___9~2); 251611#L2687-3 assume !(1 == ~doorState~0); 251609#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 251599#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 251594#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 251575#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 251573#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 251574#L2412-3 assume !(1 == ~currentHeading~0); 251797#L2422-9 assume !(0 == ~currentFloorID~0); 224826#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 228153#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 235337#L3207-1 assume !(-1 == ~expectedDirection~0); 235334#L3219-1 assume !(1 == ~expectedDirection~0); 235333#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 234190#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 234188#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 234182#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 234177#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 234174#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 234159#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 234151#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 234144#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 234141#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 234135#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 234130#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 234126#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 234128#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 234131#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 234129#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 234124#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 234125#L2596-2 assume !(0 != timeShift_~tmp___9~2); 251467#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 251460#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 251451#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 251440#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 251429#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 251427#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 251428#L2412-6 assume !(1 == ~currentHeading~0); 251770#L2422-18 assume !(0 == ~currentFloorID~0); 224777#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 228013#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 233273#L3207-2 assume !(-1 == ~expectedDirection~0); 233269#L3219-2 assume !(1 == ~expectedDirection~0); 232336#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 232331#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 232325#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 232324#L765-1 assume 0 == initPersonOnFloor_~floor; 232172#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 232151#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 232047#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 232043#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 232042#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 232041#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 232038#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 232035#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 232036#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 245614#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 244476#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 224421#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 228549#L494-63 assume !(0 == isFloorCalling_~floorID); 228550#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 227506#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 226699#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 225575#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 224480#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 224481#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 251326#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 251325#L2596-3 assume !(0 != timeShift_~tmp___9~2); 251324#L2687-9 assume !(1 == ~doorState~0); 251323#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 251322#L2036-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 229711#L1068-15 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 225842#L2040-6 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 223034#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 223035#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 224230#L2412-9 assume !(1 == ~currentHeading~0); 224890#L2422-27 assume !(0 == ~currentFloorID~0); 224773#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230243#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 230240#L3207-3 assume !(-1 == ~expectedDirection~0); 230234#L3219-3 assume !(1 == ~expectedDirection~0); 230229#L3220-3 cleanup_~i~0 := 0; 230227#L1268-2 [2018-12-08 17:20:56,109 INFO L796 eck$LassoCheckResult]: Loop: 230227#L1268-2 assume !false; 230226#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 230225#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 230224#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 230223#L1276 assume 1 != cleanup_~tmp___0~0; 230222#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 230219#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 230220#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 236577#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 236465#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 244243#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 244242#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 244241#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 244240#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 244239#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 244238#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 244235#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 244231#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 243070#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 241944#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 228453#L494-89 assume !(0 == isFloorCalling_~floorID); 228454#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 226855#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 226667#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 225553#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 224466#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 224467#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 227837#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 250704#L2596-4 assume !(0 != timeShift_~tmp___9~2); 223911#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 223912#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 223915#L2036-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 226145#L1068-20 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 236273#L2040-8 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 230138#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 236262#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 236249#L2412-12 assume !(1 == ~currentHeading~0); 232191#L2422-36 assume !(0 == ~currentFloorID~0); 230244#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230242#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 230237#L3207-4 assume !(-1 == ~expectedDirection~0); 230231#L3219-4 assume !(1 == ~expectedDirection~0); 230228#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 230227#L1268-2 [2018-12-08 17:20:56,117 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:20:56,117 INFO L82 PathProgramCache]: Analyzing trace with hash 1471965026, now seen corresponding path program 1 times [2018-12-08 17:20:56,117 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:20:56,117 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:20:56,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:56,118 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:20:56,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:56,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:20:56,166 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:20:56,166 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:20:56,166 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:20:56,167 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:20:56,167 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:20:56,167 INFO L82 PathProgramCache]: Analyzing trace with hash 1633177098, now seen corresponding path program 1 times [2018-12-08 17:20:56,167 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:20:56,167 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:20:56,167 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:56,167 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:20:56,167 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:20:56,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:20:56,182 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:20:56,182 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:20:56,182 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 17:20:56,183 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:20:56,183 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 17:20:56,183 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 17:20:56,183 INFO L87 Difference]: Start difference. First operand 29031 states and 53925 transitions. cyclomatic complexity: 24895 Second operand 5 states. [2018-12-08 17:20:59,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:20:59,944 INFO L93 Difference]: Finished difference Result 69175 states and 128889 transitions. [2018-12-08 17:20:59,944 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-12-08 17:20:59,944 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 69175 states and 128889 transitions. [2018-12-08 17:21:00,112 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17728 [2018-12-08 17:21:00,242 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 69175 states to 69175 states and 128889 transitions. [2018-12-08 17:21:00,242 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 69175 [2018-12-08 17:21:00,283 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 69175 [2018-12-08 17:21:00,283 INFO L73 IsDeterministic]: Start isDeterministic. Operand 69175 states and 128889 transitions. [2018-12-08 17:21:00,317 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:21:00,318 INFO L705 BuchiCegarLoop]: Abstraction has 69175 states and 128889 transitions. [2018-12-08 17:21:00,347 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69175 states and 128889 transitions. [2018-12-08 17:21:00,599 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69175 to 28459. [2018-12-08 17:21:00,599 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 28459 states. [2018-12-08 17:21:00,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28459 states to 28459 states and 52899 transitions. [2018-12-08 17:21:00,637 INFO L728 BuchiCegarLoop]: Abstraction has 28459 states and 52899 transitions. [2018-12-08 17:21:00,637 INFO L608 BuchiCegarLoop]: Abstraction has 28459 states and 52899 transitions. [2018-12-08 17:21:00,637 INFO L442 BuchiCegarLoop]: ======== Iteration 7============ [2018-12-08 17:21:00,637 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28459 states and 52899 transitions. [2018-12-08 17:21:00,687 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6693 [2018-12-08 17:21:00,688 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:21:00,688 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:21:00,689 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:00,689 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:00,689 INFO L794 eck$LassoCheckResult]: Stem: 322699#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 322700#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 322301#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 322104#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 322105#L1462 assume 0 != main_~tmp~11; 322469#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 326251#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 322571#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 322553#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 322329#L765 assume 0 == initPersonOnFloor_~floor; 321394#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 321026#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 325701#L557 assume !(0 == callOnFloor_~floorID); 327319#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 322307#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 322309#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 323097#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 323098#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 321709#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 321711#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 328068#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 323932#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 322689#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 326721#L494 assume !(0 == isFloorCalling_~floorID); 326690#L498 assume !(1 == isFloorCalling_~floorID); 325425#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 324562#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 324931#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 324005#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 324006#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 327966#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 327965#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 327964#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 327963#L2596 assume !(0 != timeShift_~tmp___9~2); 327962#L2687 assume !(1 == ~doorState~0); 327961#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 327959#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 327958#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 324217#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 321202#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 321203#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 322472#L2412 assume !(1 == ~currentHeading~0); 323135#L2422 assume !(0 == ~currentFloorID~0); 323064#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 327867#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 327865#L3207 assume !(-1 == ~expectedDirection~0); 327862#L3219 assume !(1 == ~expectedDirection~0); 327860#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 327859#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 327858#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 327855#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 327851#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 327848#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 327839#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 327825#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 327819#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 327813#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 327812#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 327811#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 327809#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 327806#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 327807#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 335706#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 335705#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 335704#L2596-1 assume !(0 != timeShift_~tmp___9~2); 322153#L2687-3 assume !(1 == ~doorState~0); 322154#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 324398#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 324399#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 321251#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 321252#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 322475#L2412-3 assume !(1 == ~currentHeading~0); 348369#L2422-9 assume !(0 == ~currentFloorID~0); 323031#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 334084#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 334074#L3207-1 assume !(-1 == ~expectedDirection~0); 334075#L3219-1 assume !(1 == ~expectedDirection~0); 334068#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 334069#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 334063#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 334064#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 344016#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 334065#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 334061#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 334056#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 334023#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 333855#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 333854#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 333852#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 333851#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 333849#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 333844#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 333842#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 333841#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 333834#L2596-2 assume !(0 != timeShift_~tmp___9~2); 322144#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 322145#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 322146#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 324413#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 348197#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 348194#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 348195#L2412-6 assume !(1 == ~currentHeading~0); 348486#L2422-18 assume !(0 == ~currentFloorID~0); 322990#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 332304#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 332294#L3207-2 assume !(-1 == ~expectedDirection~0); 332293#L3219-2 assume !(1 == ~expectedDirection~0); 332285#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 332286#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 342111#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 342110#L765-1 assume 0 == initPersonOnFloor_~floor; 332261#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 332242#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 332236#L557-2 assume !(0 == callOnFloor_~floorID); 332238#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 332229#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 332230#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 332225#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 332226#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 342034#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 332224#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 332219#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 332215#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 332181#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 330888#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 330884#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 330579#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 330575#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 330576#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 330578#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 330577#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 330574#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 330571#L2596-3 assume !(0 != timeShift_~tmp___9~2); 322147#L2687-9 assume !(1 == ~doorState~0); 322148#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 324381#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 324382#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 348434#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 348432#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 348433#L2412-9 assume !(1 == ~currentHeading~0); 349453#L2422-27 assume !(0 == ~currentFloorID~0); 322988#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 328242#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 328234#L3207-3 assume !(-1 == ~expectedDirection~0); 328233#L3219-3 assume !(1 == ~expectedDirection~0); 328215#L3220-3 cleanup_~i~0 := 0; 328214#L1268-2 [2018-12-08 17:21:00,689 INFO L796 eck$LassoCheckResult]: Loop: 328214#L1268-2 assume !false; 328209#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 328210#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 328205#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 328206#L1276 assume 1 != cleanup_~tmp___0~0; 328199#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 328200#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 328179#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 328180#L1940 assume !(0 != anyStopRequested_~tmp___3~0); 337479#L1944 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 328141#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 328142#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 328137#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 328138#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 328133#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 328134#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 343902#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 328127#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 328126#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 328124#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 328093#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 328090#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 328089#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 328088#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 328086#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 328083#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 328084#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 331426#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 331425#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 331418#L2596-4 assume !(0 != timeShift_~tmp___9~2); 322138#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 322139#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 324389#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 324390#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 348317#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 348315#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 348316#L2412-12 assume !(1 == ~currentHeading~0); 349452#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 322943#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 328243#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 328228#L3207-4 assume !(-1 == ~expectedDirection~0); 328227#L3219-4 assume !(1 == ~expectedDirection~0); 328213#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 328214#L1268-2 [2018-12-08 17:21:00,691 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:00,691 INFO L82 PathProgramCache]: Analyzing trace with hash -1141662208, now seen corresponding path program 1 times [2018-12-08 17:21:00,691 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:00,694 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:00,694 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:00,694 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:00,695 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:00,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:00,738 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:00,738 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:00,738 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:21:00,738 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:21:00,738 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:00,739 INFO L82 PathProgramCache]: Analyzing trace with hash 1268916975, now seen corresponding path program 1 times [2018-12-08 17:21:00,739 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:00,739 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:00,739 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:00,739 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:00,739 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:00,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:00,754 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:00,754 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:00,754 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 17:21:00,754 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:21:00,754 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 17:21:00,754 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 17:21:00,755 INFO L87 Difference]: Start difference. First operand 28459 states and 52899 transitions. cyclomatic complexity: 24441 Second operand 5 states. [2018-12-08 17:21:02,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:21:02,625 INFO L93 Difference]: Finished difference Result 140675 states and 263532 transitions. [2018-12-08 17:21:02,625 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-12-08 17:21:02,625 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 140675 states and 263532 transitions. [2018-12-08 17:21:02,989 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 35538 [2018-12-08 17:21:03,270 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 140675 states to 140675 states and 263532 transitions. [2018-12-08 17:21:03,271 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 140675 [2018-12-08 17:21:03,349 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 140675 [2018-12-08 17:21:03,349 INFO L73 IsDeterministic]: Start isDeterministic. Operand 140675 states and 263532 transitions. [2018-12-08 17:21:03,414 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:21:03,414 INFO L705 BuchiCegarLoop]: Abstraction has 140675 states and 263532 transitions. [2018-12-08 17:21:03,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 140675 states and 263532 transitions. [2018-12-08 17:21:03,958 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 140675 to 55587. [2018-12-08 17:21:03,958 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55587 states. [2018-12-08 17:21:04,019 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55587 states to 55587 states and 103371 transitions. [2018-12-08 17:21:04,020 INFO L728 BuchiCegarLoop]: Abstraction has 55587 states and 103371 transitions. [2018-12-08 17:21:04,020 INFO L608 BuchiCegarLoop]: Abstraction has 55587 states and 103371 transitions. [2018-12-08 17:21:04,020 INFO L442 BuchiCegarLoop]: ======== Iteration 8============ [2018-12-08 17:21:04,020 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55587 states and 103371 transitions. [2018-12-08 17:21:04,123 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13132 [2018-12-08 17:21:04,123 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:21:04,123 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:21:04,125 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:04,125 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:04,125 INFO L794 eck$LassoCheckResult]: Stem: 491889#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 491890#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 491472#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 491267#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 491268#L1462 assume 0 != main_~tmp~11; 491634#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 495499#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 491744#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 491727#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 491497#L765 assume 0 == initPersonOnFloor_~floor; 490557#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 490182#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 494904#L557 assume !(0 == callOnFloor_~floorID); 496760#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 491477#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 490176#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 490177#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 490683#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 490684#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 490872#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 491836#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 491837#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 491879#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 496054#L494 assume !(0 == isFloorCalling_~floorID); 496015#L498 assume !(1 == isFloorCalling_~floorID); 494618#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 493748#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 494120#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 493189#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 492715#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 491816#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 491817#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 495256#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 497371#L2596 assume !(0 != timeShift_~tmp___9~2); 491409#L2687 assume !(1 == ~doorState~0); 491313#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 491314#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 493586#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 497318#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 498361#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 498358#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 498353#L2412 assume !(1 == ~currentHeading~0); 498347#L2422 assume !(0 == ~currentFloorID~0); 498342#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 498339#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 498337#L3207 assume !(-1 == ~expectedDirection~0); 498334#L3219 assume !(1 == ~expectedDirection~0); 498332#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 498331#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 498330#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 498327#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 498323#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 498314#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 498308#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 498293#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 498286#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 498280#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 498278#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 498277#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 498275#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 498268#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 498261#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 498262#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 498256#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 498257#L2596-1 assume !(0 != timeShift_~tmp___9~2); 498248#L2687-3 assume !(1 == ~doorState~0); 498249#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 498212#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 498213#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 498169#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 498170#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 498163#L2412-3 assume !(1 == ~currentHeading~0); 498164#L2422-9 assume !(0 == ~currentFloorID~0); 501872#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 501870#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 501867#L3207-1 assume !(-1 == ~expectedDirection~0); 501864#L3219-1 assume !(1 == ~expectedDirection~0); 501863#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 501862#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 501861#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 501859#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 501858#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 498143#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 498140#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 498102#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 498071#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 498067#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 498064#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 498062#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 498056#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 498054#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 498047#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 498042#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 498037#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 498018#L2596-2 assume !(0 != timeShift_~tmp___9~2); 498017#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 498016#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 497995#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 497996#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 497960#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 497961#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 497955#L2412-6 assume !(1 == ~currentHeading~0); 497956#L2422-18 assume !(0 == ~currentFloorID~0); 501482#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 501479#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 501477#L3207-2 assume !(-1 == ~expectedDirection~0); 501474#L3219-2 assume !(1 == ~expectedDirection~0); 501472#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 501468#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 501465#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 501464#L765-1 assume 0 == initPersonOnFloor_~floor; 501449#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 501429#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 501427#L557-2 assume !(0 == callOnFloor_~floorID); 501426#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 501422#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 501421#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 501420#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 501418#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 501417#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 497808#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 497804#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 497630#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 497594#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 497590#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 497586#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 497584#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 497580#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 497578#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 497574#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 497572#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 497570#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 497565#L2596-3 assume !(0 != timeShift_~tmp___9~2); 497557#L2687-9 assume !(1 == ~doorState~0); 497545#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 497529#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 497530#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 497450#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 497451#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 499306#L2412-9 assume !(1 == ~currentHeading~0); 497632#L2422-27 assume !(0 == ~currentFloorID~0); 497633#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 528595#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 528592#L3207-3 assume !(-1 == ~expectedDirection~0); 528586#L3219-3 assume !(1 == ~expectedDirection~0); 528581#L3220-3 cleanup_~i~0 := 0; 528579#L1268-2 [2018-12-08 17:21:04,126 INFO L796 eck$LassoCheckResult]: Loop: 528579#L1268-2 assume !false; 528578#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 528577#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 528576#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 528573#L1276 assume 1 != cleanup_~tmp___0~0; 528571#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 528569#L494-84 assume !(0 == isFloorCalling_~floorID); 528565#L498-84 assume !(1 == isFloorCalling_~floorID); 528552#L502-84 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 528548#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 528539#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 528533#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 528531#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 528529#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 528526#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 528525#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 528524#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 528507#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 497814#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 497810#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 497806#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 497768#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 497764#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 497760#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 497756#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 497730#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 497728#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 497721#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 497722#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 497714#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 497715#L2596-4 assume !(0 != timeShift_~tmp___9~2); 497706#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 497707#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 497680#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 497681#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 497643#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 497644#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 499030#L2412-12 assume !(1 == ~currentHeading~0); 497636#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 497637#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 528594#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 528589#L3207-4 assume !(-1 == ~expectedDirection~0); 528583#L3219-4 assume !(1 == ~expectedDirection~0); 528580#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 528579#L1268-2 [2018-12-08 17:21:04,127 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:04,127 INFO L82 PathProgramCache]: Analyzing trace with hash -1141662208, now seen corresponding path program 2 times [2018-12-08 17:21:04,130 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:04,130 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:04,130 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:04,130 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:04,130 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:04,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:04,177 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:04,177 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:04,177 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:21:04,177 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:21:04,177 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:04,177 INFO L82 PathProgramCache]: Analyzing trace with hash -207691871, now seen corresponding path program 1 times [2018-12-08 17:21:04,177 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:04,177 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:04,178 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:04,178 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-08 17:21:04,178 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:04,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:04,242 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:04,242 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:04,243 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 17:21:04,243 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:21:04,243 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-08 17:21:04,243 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-08 17:21:04,243 INFO L87 Difference]: Start difference. First operand 55587 states and 103371 transitions. cyclomatic complexity: 47785 Second operand 3 states. [2018-12-08 17:21:04,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:21:04,959 INFO L93 Difference]: Finished difference Result 60139 states and 111615 transitions. [2018-12-08 17:21:04,959 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-08 17:21:04,960 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60139 states and 111615 transitions. [2018-12-08 17:21:05,110 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13506 [2018-12-08 17:21:05,226 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60139 states to 60139 states and 111615 transitions. [2018-12-08 17:21:05,226 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 60139 [2018-12-08 17:21:05,259 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 60139 [2018-12-08 17:21:05,259 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60139 states and 111615 transitions. [2018-12-08 17:21:05,288 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:21:05,288 INFO L705 BuchiCegarLoop]: Abstraction has 60139 states and 111615 transitions. [2018-12-08 17:21:05,316 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60139 states and 111615 transitions. [2018-12-08 17:21:05,610 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60139 to 55051. [2018-12-08 17:21:05,611 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55051 states. [2018-12-08 17:21:05,672 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55051 states to 55051 states and 102363 transitions. [2018-12-08 17:21:05,672 INFO L728 BuchiCegarLoop]: Abstraction has 55051 states and 102363 transitions. [2018-12-08 17:21:05,672 INFO L608 BuchiCegarLoop]: Abstraction has 55051 states and 102363 transitions. [2018-12-08 17:21:05,672 INFO L442 BuchiCegarLoop]: ======== Iteration 9============ [2018-12-08 17:21:05,672 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55051 states and 102363 transitions. [2018-12-08 17:21:05,775 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12836 [2018-12-08 17:21:05,775 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:21:05,775 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:21:05,776 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:05,776 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:05,776 INFO L794 eck$LassoCheckResult]: Stem: 607602#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 607603#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 607193#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 606985#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 606986#L1462 assume 0 != main_~tmp~11; 607354#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 610987#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 607468#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 607449#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 607219#L765 assume 0 == initPersonOnFloor_~floor; 606286#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 605916#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 610424#L557 assume !(0 == callOnFloor_~floorID); 612088#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 607198#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 657007#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 657006#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 657004#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 657005#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 657015#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 657038#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 656980#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 656974#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 656973#L494 assume !(0 == isFloorCalling_~floorID); 656972#L498 assume !(1 == isFloorCalling_~floorID); 656969#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 656968#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 656966#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 656967#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 647080#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 647076#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 647074#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 647073#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 647071#L2596 assume !(0 != timeShift_~tmp___9~2); 647070#L2687 assume !(1 == ~doorState~0); 647069#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 647067#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 647066#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 647065#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 606092#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 606093#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 607356#L2412 assume !(1 == ~currentHeading~0); 608038#L2422 assume !(0 == ~currentFloorID~0); 607973#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 611077#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 656198#L3207 assume !(-1 == ~expectedDirection~0); 656194#L3219 assume !(1 == ~expectedDirection~0); 656192#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 656191#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 656190#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 656189#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 611505#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 611507#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 660897#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 660895#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 660894#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 609131#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 654633#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 655579#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 655553#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 655554#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 655580#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 655555#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 655556#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 660929#L2596-1 assume !(0 != timeShift_~tmp___9~2); 660353#L2687-3 assume !(1 == ~doorState~0); 660352#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 660351#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 658878#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 658859#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 658856#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 658818#L2412-3 assume !(1 == ~currentHeading~0); 658809#L2422-9 assume !(0 == ~currentFloorID~0); 658803#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 658801#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 658798#L3207-1 assume !(-1 == ~expectedDirection~0); 658790#L3219-1 assume !(1 == ~expectedDirection~0); 658789#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 658788#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 658787#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 658786#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 643289#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 643285#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 643282#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 643276#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 643254#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 639281#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 639273#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 639271#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 639267#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 639262#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 639257#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 639249#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 639243#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 639210#L2596-2 assume !(0 != timeShift_~tmp___9~2); 639204#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 639199#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 639195#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 639196#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 638957#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 638954#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 638951#L2412-6 assume !(1 == ~currentHeading~0); 638946#L2422-18 assume !(0 == ~currentFloorID~0); 638945#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 638942#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 638940#L3207-2 assume !(-1 == ~expectedDirection~0); 638937#L3219-2 assume !(1 == ~expectedDirection~0); 638935#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 638751#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 638746#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 638703#L765-1 assume 0 == initPersonOnFloor_~floor; 633019#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 632999#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 632997#L557-2 assume !(0 == callOnFloor_~floorID); 632995#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 632991#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 632986#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 632984#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 632982#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 632983#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 632610#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 632606#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 632603#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 632577#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 632571#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 632568#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 632567#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 632566#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 632564#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 632559#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 632555#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 632553#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 632551#L2596-3 assume !(0 != timeShift_~tmp___9~2); 632550#L2687-9 assume !(1 == ~doorState~0); 632549#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 632547#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 632506#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 632496#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 632494#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 632492#L2412-9 assume !(1 == ~currentHeading~0); 632483#L2422-27 assume !(0 == ~currentFloorID~0); 613454#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 613451#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 613301#L3207-3 assume !(-1 == ~expectedDirection~0); 613298#L3219-3 assume !(1 == ~expectedDirection~0); 613296#L3220-3 cleanup_~i~0 := 0; 613294#L1268-2 [2018-12-08 17:21:05,777 INFO L796 eck$LassoCheckResult]: Loop: 613294#L1268-2 assume !false; 613293#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 613292#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 613291#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 613290#L1276 assume 1 != cleanup_~tmp___0~0; 613286#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 613266#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 613261#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 613246#L1940 assume !(0 != anyStopRequested_~tmp___3~0); 613239#L1944 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 613220#L494-85 assume !(0 == isFloorCalling_~floorID); 613205#L498-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 613203#L521-85 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 613178#L1951 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 613169#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 613167#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 613164#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 613159#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 613156#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 613151#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 613146#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 612802#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 612785#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 612776#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 612768#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 612765#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 612763#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 612762#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 612761#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 612760#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 612754#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 612750#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 612747#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 612741#L2596-4 assume !(0 != timeShift_~tmp___9~2); 612736#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 612728#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 612716#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 612705#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 612689#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 612679#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 612671#L2412-12 assume !(1 == ~currentHeading~0); 612662#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 612651#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 612652#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 613305#L3207-4 assume !(-1 == ~expectedDirection~0); 613303#L3219-4 assume !(1 == ~expectedDirection~0); 613295#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 613294#L1268-2 [2018-12-08 17:21:05,781 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:05,782 INFO L82 PathProgramCache]: Analyzing trace with hash -1141662208, now seen corresponding path program 3 times [2018-12-08 17:21:05,782 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:05,782 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:05,782 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:05,782 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:05,782 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:05,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:05,832 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:05,832 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:05,832 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:21:05,832 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:21:05,832 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:05,833 INFO L82 PathProgramCache]: Analyzing trace with hash 1163237991, now seen corresponding path program 1 times [2018-12-08 17:21:05,833 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:05,833 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:05,833 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:05,833 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-08 17:21:05,833 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:05,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:05,848 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:05,848 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:05,848 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:21:05,848 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:21:05,849 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-12-08 17:21:05,849 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-12-08 17:21:05,849 INFO L87 Difference]: Start difference. First operand 55051 states and 102363 transitions. cyclomatic complexity: 47313 Second operand 4 states. [2018-12-08 17:21:06,282 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:21:06,282 INFO L93 Difference]: Finished difference Result 101957 states and 189935 transitions. [2018-12-08 17:21:06,282 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-12-08 17:21:06,282 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 101957 states and 189935 transitions. [2018-12-08 17:21:06,571 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24618 [2018-12-08 17:21:06,791 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 101957 states to 101957 states and 189935 transitions. [2018-12-08 17:21:06,791 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 101957 [2018-12-08 17:21:06,859 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 101957 [2018-12-08 17:21:06,860 INFO L73 IsDeterministic]: Start isDeterministic. Operand 101957 states and 189935 transitions. [2018-12-08 17:21:06,916 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:21:06,917 INFO L705 BuchiCegarLoop]: Abstraction has 101957 states and 189935 transitions. [2018-12-08 17:21:06,967 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101957 states and 189935 transitions. [2018-12-08 17:21:08,742 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101957 to 55103. [2018-12-08 17:21:08,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55103 states. [2018-12-08 17:21:08,801 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55103 states to 55103 states and 102415 transitions. [2018-12-08 17:21:08,802 INFO L728 BuchiCegarLoop]: Abstraction has 55103 states and 102415 transitions. [2018-12-08 17:21:08,802 INFO L608 BuchiCegarLoop]: Abstraction has 55103 states and 102415 transitions. [2018-12-08 17:21:08,802 INFO L442 BuchiCegarLoop]: ======== Iteration 10============ [2018-12-08 17:21:08,802 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55103 states and 102415 transitions. [2018-12-08 17:21:08,896 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12848 [2018-12-08 17:21:08,897 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:21:08,897 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:21:08,898 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:08,898 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:08,899 INFO L794 eck$LassoCheckResult]: Stem: 764660#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 764661#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 764232#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 764024#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 764025#L1462 assume 0 != main_~tmp~11; 764399#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 768161#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 764512#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 764493#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 764259#L765 assume 0 == initPersonOnFloor_~floor; 763315#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 762936#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 767580#L557 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 764239#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 762930#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 762931#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 763437#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 763438#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 763627#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 765538#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 765879#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 764649#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 768681#L494 assume !(0 == isFloorCalling_~floorID); 768682#L498 assume !(1 == isFloorCalling_~floorID); 767305#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 766501#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 766847#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 766849#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 765475#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 765476#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 767925#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 767926#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 769941#L2596 assume !(0 != timeShift_~tmp___9~2); 769943#L2687 assume !(1 == ~doorState~0); 764072#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 764073#L2036 assume !(1 == stopRequestedInDirection_~dir); 765824#L2205 assume !(0 == ~currentFloorID~0); 765825#L2211 assume !(~currentFloorID~0 > 0); 764556#L2226 assume ~currentFloorID~0 > 0; 764557#L2228 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 764495#L2229 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 764496#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 770222#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 765101#L2412 assume !(1 == ~currentHeading~0); 765102#L2422 assume !(0 == ~currentFloorID~0); 768268#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 768253#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 775362#L3207 assume !(-1 == ~expectedDirection~0); 775356#L3219 assume !(1 == ~expectedDirection~0); 773235#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 773234#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 773233#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 773231#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 773232#L3138-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 765918#L1849-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 764579#L1870-16 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 764580#L3142-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 798139#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 798138#L494-21 assume !(0 == isFloorCalling_~floorID); 798135#L498-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 798133#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 798125#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 798126#L1849-21 assume !(0 == buttonForFloorIsPressed_~floorID); 798130#L1853-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 798128#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 798127#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 798124#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 798121#L2596-1 assume !(0 != timeShift_~tmp___9~2); 770677#L2687-3 assume !(1 == ~doorState~0); 770678#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 771558#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 771557#L2205-2 assume !(0 == ~currentFloorID~0); 771556#L2211-2 assume !(~currentFloorID~0 > 0); 770307#L2226-2 assume ~currentFloorID~0 > 0; 771575#L2228-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 764480#L2229-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 763237#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 770955#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 770957#L2412-3 assume !(1 == ~currentHeading~0); 768256#L2422-9 assume !(0 == ~currentFloorID~0); 764999#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 815307#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 815304#L3207-1 assume !(-1 == ~expectedDirection~0); 815301#L3219-1 assume !(1 == ~expectedDirection~0); 811791#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 811790#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 811709#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 781861#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 781862#L3138-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 801025#L1849-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 801020#L1870-27 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 801004#L3142-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 793622#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 800997#L494-42 assume !(0 == isFloorCalling_~floorID); 800995#L498-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 800990#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 800988#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 800989#L1849-32 assume !(0 == buttonForFloorIsPressed_~floorID); 781923#L1853-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 781872#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 781870#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 781868#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 770962#L2596-2 assume !(0 != timeShift_~tmp___9~2); 770964#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 777927#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 777925#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 777926#L2205-4 assume !(0 == ~currentFloorID~0); 777952#L2211-4 assume !(~currentFloorID~0 > 0); 764543#L2226-4 assume ~currentFloorID~0 > 0; 764545#L2228-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 764485#L2229-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 764486#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 778428#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 765088#L2412-6 assume !(1 == ~currentHeading~0); 765089#L2422-18 assume !(0 == ~currentFloorID~0); 768238#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 768108#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 817496#L3207-2 assume !(-1 == ~expectedDirection~0); 817493#L3219-2 assume !(1 == ~expectedDirection~0); 817491#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 817487#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 817484#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 817483#L765-1 assume 0 == initPersonOnFloor_~floor; 817409#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 817388#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 817382#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 816919#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 817378#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 817377#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 817375#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 817376#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 817506#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 817499#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 817353#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 817352#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 817351#L494-63 assume !(0 == isFloorCalling_~floorID); 817037#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 817029#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 817024#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 817025#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 817033#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 817028#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 817026#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 817027#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 818006#L2596-3 assume !(0 != timeShift_~tmp___9~2); 817916#L2687-9 assume !(1 == ~doorState~0); 764063#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 764064#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 766335#L2205-6 assume !(0 == ~currentFloorID~0); 817870#L2211-6 assume !(~currentFloorID~0 > 0); 770192#L2226-6 assume ~currentFloorID~0 > 0; 817867#L2228-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 764487#L2229-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 763215#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 815873#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 815874#L2412-9 assume !(1 == ~currentHeading~0); 782000#L2422-27 assume !(0 == ~currentFloorID~0); 782001#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 817838#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 769324#L3207-3 assume !(-1 == ~expectedDirection~0); 764186#L3219-3 assume !(1 == ~expectedDirection~0); 764036#L3220-3 cleanup_~i~0 := 0; 764029#L1268-2 [2018-12-08 17:21:08,899 INFO L796 eck$LassoCheckResult]: Loop: 764029#L1268-2 assume !false; 769337#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 769255#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 763923#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 763924#L1276 assume 1 != cleanup_~tmp___0~0; 764116#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 764117#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 768537#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 769566#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 769567#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 817070#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 817065#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 817063#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 817062#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 817061#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 784572#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 784573#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 816603#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 816595#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 816594#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 816593#L494-89 assume !(0 == isFloorCalling_~floorID); 816590#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 816588#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 816585#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 816586#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 817123#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 764656#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 764657#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 816587#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 816949#L2596-4 assume !(0 != timeShift_~tmp___9~2); 764061#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 764062#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 817709#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 817710#L2205-8 assume !(0 == ~currentFloorID~0); 817724#L2211-8 assume !(~currentFloorID~0 > 0); 764553#L2226-8 assume ~currentFloorID~0 > 0; 764555#L2228-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 770152#L2229-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 770151#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 815599#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 765076#L2412-12 assume !(1 == ~currentHeading~0); 765077#L2422-36 assume !(0 == ~currentFloorID~0); 768098#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 768085#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 768827#L3207-4 assume !(-1 == ~expectedDirection~0); 763951#L3219-4 assume !(1 == ~expectedDirection~0); 763953#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 764029#L1268-2 [2018-12-08 17:21:08,906 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:08,906 INFO L82 PathProgramCache]: Analyzing trace with hash 170153110, now seen corresponding path program 1 times [2018-12-08 17:21:08,906 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:08,906 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:08,907 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:08,907 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:08,907 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:08,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:08,947 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:08,947 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:08,947 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:21:08,948 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:21:08,948 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:08,948 INFO L82 PathProgramCache]: Analyzing trace with hash 53502033, now seen corresponding path program 1 times [2018-12-08 17:21:08,948 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:08,948 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:08,948 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:08,949 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:08,949 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:08,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:08,987 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:08,987 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:08,987 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 17:21:08,987 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:21:08,987 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 17:21:08,988 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 17:21:08,988 INFO L87 Difference]: Start difference. First operand 55103 states and 102415 transitions. cyclomatic complexity: 47313 Second operand 5 states. [2018-12-08 17:21:10,061 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:21:10,061 INFO L93 Difference]: Finished difference Result 72523 states and 134333 transitions. [2018-12-08 17:21:10,061 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-08 17:21:10,061 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 72523 states and 134333 transitions. [2018-12-08 17:21:10,245 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17260 [2018-12-08 17:21:10,386 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 72523 states to 72523 states and 134333 transitions. [2018-12-08 17:21:10,386 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 72523 [2018-12-08 17:21:10,427 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 72523 [2018-12-08 17:21:10,427 INFO L73 IsDeterministic]: Start isDeterministic. Operand 72523 states and 134333 transitions. [2018-12-08 17:21:10,462 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:21:10,462 INFO L705 BuchiCegarLoop]: Abstraction has 72523 states and 134333 transitions. [2018-12-08 17:21:10,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72523 states and 134333 transitions. [2018-12-08 17:21:10,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72523 to 72045. [2018-12-08 17:21:10,866 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 72045 states. [2018-12-08 17:21:10,942 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72045 states to 72045 states and 133603 transitions. [2018-12-08 17:21:10,942 INFO L728 BuchiCegarLoop]: Abstraction has 72045 states and 133603 transitions. [2018-12-08 17:21:10,942 INFO L608 BuchiCegarLoop]: Abstraction has 72045 states and 133603 transitions. [2018-12-08 17:21:10,942 INFO L442 BuchiCegarLoop]: ======== Iteration 11============ [2018-12-08 17:21:10,942 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 72045 states and 133603 transitions. [2018-12-08 17:21:11,072 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17122 [2018-12-08 17:21:11,073 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:21:11,073 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:21:11,075 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:11,075 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:11,076 INFO L794 eck$LassoCheckResult]: Stem: 892253#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 892254#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 891856#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 891655#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 891656#L1462 assume 0 != main_~tmp~11; 892018#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 895671#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 892131#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 892114#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 891883#L765 assume 0 == initPersonOnFloor_~floor; 890955#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 890580#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 895124#L557 assume !(0 == callOnFloor_~floorID); 896702#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 891861#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 890574#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 890575#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 891080#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 891082#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 893552#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 892199#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 892200#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 892243#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 896105#L494 assume !(0 == isFloorCalling_~floorID); 896084#L498 assume !(1 == isFloorCalling_~floorID); 894881#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 894086#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 894429#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 893557#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 893081#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 892189#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 892190#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 895447#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 897173#L2596 assume !(0 != timeShift_~tmp___9~2); 891793#L2687 assume !(1 == ~doorState~0); 891698#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 891699#L2036 assume !(1 == stopRequestedInDirection_~dir); 893425#L2205 assume !(0 == ~currentFloorID~0); 893426#L2211 assume ~currentFloorID~0 > 0; 893787#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 893788#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 895088#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 893772#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 890756#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 890757#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 897207#L2412 assume !(1 == ~currentHeading~0); 950696#L2422 assume !(0 == ~currentFloorID~0); 950695#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 950192#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 950186#L3207 assume !(-1 == ~expectedDirection~0); 950182#L3219 assume !(1 == ~expectedDirection~0); 950180#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 950179#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 950177#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 950173#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 950170#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 950168#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 950166#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 950160#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 950155#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 950149#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 950147#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 950145#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 950142#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 950126#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 950125#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 950123#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 950122#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 950120#L2596-1 assume !(0 != timeShift_~tmp___9~2); 950119#L2687-3 assume !(1 == ~doorState~0); 950115#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 950112#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 950113#L2205-2 assume !(0 == ~currentFloorID~0); 950086#L2211-2 assume ~currentFloorID~0 > 0; 950087#L2212-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 950381#L494-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 950566#L521-27 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 950339#L2216-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 950334#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 950333#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 949922#L2412-3 assume !(1 == ~currentHeading~0); 949842#L2422-9 assume !(0 == ~currentFloorID~0); 949834#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 949831#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 949828#L3207-1 assume !(-1 == ~expectedDirection~0); 949825#L3219-1 assume !(1 == ~expectedDirection~0); 949824#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 949823#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 949822#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 949317#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 948956#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 917746#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 917747#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 917736#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 917737#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 916277#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 916278#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 948908#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 948906#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 947934#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 947929#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 947926#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 947924#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 947922#L2596-2 assume !(0 != timeShift_~tmp___9~2); 947920#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 947404#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 947403#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 947400#L2205-4 assume !(0 == ~currentFloorID~0); 947270#L2211-4 assume !(~currentFloorID~0 > 0); 947267#L2226-4 assume ~currentFloorID~0 > 0; 892077#L2228-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 892079#L2229-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 892105#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 925158#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 925157#L2412-6 assume !(1 == ~currentHeading~0); 925154#L2422-18 assume !(0 == ~currentFloorID~0); 925153#L2422-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 925149#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 960922#L3207-2 assume !(-1 == ~expectedDirection~0); 960920#L3219-2 assume !(1 == ~expectedDirection~0); 960918#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 960914#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 895513#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 891885#L765-1 assume 0 == initPersonOnFloor_~floor; 890956#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 890594#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 895126#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 896710#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 958140#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 958139#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 958137#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 923746#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 923739#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 923736#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 923735#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 923719#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 947043#L494-63 assume !(0 == isFloorCalling_~floorID); 947022#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 947010#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 947003#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 946991#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 946983#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 946979#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 946940#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 946938#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 919630#L2596-3 assume !(0 != timeShift_~tmp___9~2); 919627#L2687-9 assume !(1 == ~doorState~0); 919625#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 919623#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 919624#L2205-6 assume !(0 == ~currentFloorID~0); 919643#L2211-6 assume ~currentFloorID~0 > 0; 919615#L2212-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 918574#L2226-6 assume ~currentFloorID~0 > 0; 919610#L2228-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 918588#L2229-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 918559#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 918556#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 918554#L2412-9 assume !(1 == ~currentHeading~0); 918549#L2422-27 assume !(0 == ~currentFloorID~0); 918067#L2422-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 918059#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 960855#L3207-3 assume !(-1 == ~expectedDirection~0); 960849#L3219-3 assume !(1 == ~expectedDirection~0); 960847#L3220-3 cleanup_~i~0 := 0; 896700#L1268-2 [2018-12-08 17:21:11,076 INFO L796 eck$LassoCheckResult]: Loop: 896700#L1268-2 assume !false; 896687#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 896615#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 891561#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 891562#L1276 assume 1 != cleanup_~tmp___0~0; 891744#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 891745#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 896005#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 896982#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 957625#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 958237#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 957623#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 957622#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 949307#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 949291#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 925077#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 925075#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 925071#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 923815#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 923814#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 923813#L494-89 assume !(0 == isFloorCalling_~floorID); 923810#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 923777#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 923775#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 923774#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 923771#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 923769#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 923767#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 923766#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 923758#L2596-4 assume !(0 != timeShift_~tmp___9~2); 923755#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 923753#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 923750#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 923748#L2205-8 assume !(0 == ~currentFloorID~0); 923745#L2211-8 assume ~currentFloorID~0 > 0; 919818#L2212-8 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 923730#L2226-8 assume ~currentFloorID~0 > 0; 919815#L2228-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 923723#L2229-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 919978#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 919779#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 919778#L2412-12 assume !(1 == ~currentHeading~0); 918594#L2422-36 assume !(0 == ~currentFloorID~0); 918068#L2422-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 918070#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 960858#L3207-4 assume !(-1 == ~expectedDirection~0); 960852#L3219-4 assume !(1 == ~expectedDirection~0); 960846#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 896700#L1268-2 [2018-12-08 17:21:11,085 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:11,085 INFO L82 PathProgramCache]: Analyzing trace with hash -1600655977, now seen corresponding path program 1 times [2018-12-08 17:21:11,086 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:11,086 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:11,086 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:11,086 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:11,086 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:11,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:11,143 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:11,143 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:11,143 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:21:11,143 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:21:11,143 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:11,143 INFO L82 PathProgramCache]: Analyzing trace with hash 2071598597, now seen corresponding path program 1 times [2018-12-08 17:21:11,143 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:11,143 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:11,144 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:11,144 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:11,144 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:11,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:11,156 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:11,156 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:11,156 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:21:11,157 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:21:11,157 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-12-08 17:21:11,157 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-12-08 17:21:11,157 INFO L87 Difference]: Start difference. First operand 72045 states and 133603 transitions. cyclomatic complexity: 61559 Second operand 4 states. [2018-12-08 17:21:12,268 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:21:12,268 INFO L93 Difference]: Finished difference Result 93529 states and 172137 transitions. [2018-12-08 17:21:12,268 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-12-08 17:21:12,268 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 93529 states and 172137 transitions. [2018-12-08 17:21:12,471 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 21812 [2018-12-08 17:21:12,627 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 93529 states to 93529 states and 172137 transitions. [2018-12-08 17:21:12,628 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 93529 [2018-12-08 17:21:12,669 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 93529 [2018-12-08 17:21:12,669 INFO L73 IsDeterministic]: Start isDeterministic. Operand 93529 states and 172137 transitions. [2018-12-08 17:21:12,706 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:21:12,706 INFO L705 BuchiCegarLoop]: Abstraction has 93529 states and 172137 transitions. [2018-12-08 17:21:12,741 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93529 states and 172137 transitions. [2018-12-08 17:21:13,141 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93529 to 72045. [2018-12-08 17:21:13,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 72045 states. [2018-12-08 17:21:13,218 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72045 states to 72045 states and 133075 transitions. [2018-12-08 17:21:13,218 INFO L728 BuchiCegarLoop]: Abstraction has 72045 states and 133075 transitions. [2018-12-08 17:21:13,218 INFO L608 BuchiCegarLoop]: Abstraction has 72045 states and 133075 transitions. [2018-12-08 17:21:13,218 INFO L442 BuchiCegarLoop]: ======== Iteration 12============ [2018-12-08 17:21:13,218 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 72045 states and 133075 transitions. [2018-12-08 17:21:13,350 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17122 [2018-12-08 17:21:13,350 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:21:13,350 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:21:13,353 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:13,353 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:13,353 INFO L794 eck$LassoCheckResult]: Stem: 1057885#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 1057886#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 1057469#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1057257#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 1057258#L1462 assume 0 != main_~tmp~11; 1057639#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1061324#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1057758#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1057739#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1057495#L765 assume 0 == initPersonOnFloor_~floor; 1056546#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1056166#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1060763#L557 assume !(0 == callOnFloor_~floorID); 1062478#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1057474#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1106967#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1106966#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1106965#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1061876#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1061877#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1057827#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1057828#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1063005#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1063006#L494 assume !(0 == isFloorCalling_~floorID); 1061786#L498 assume !(1 == isFloorCalling_~floorID); 1061787#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1060736#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1060737#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1059171#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1059172#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1057817#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1057818#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1063055#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1063056#L2596 assume !(0 != timeShift_~tmp___9~2); 1057406#L2687 assume !(1 == ~doorState~0); 1057407#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1059565#L2036 assume !(1 == stopRequestedInDirection_~dir); 1059566#L2205 assume !(0 == ~currentFloorID~0); 1059474#L2211 assume ~currentFloorID~0 > 0; 1059475#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1061815#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1061816#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1059392#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1059393#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1116597#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1116595#L2412 assume !(1 == ~currentHeading~0); 1116589#L2422 assume !(0 == ~currentFloorID~0); 1116588#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1116584#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1116578#L3207 assume !(-1 == ~expectedDirection~0); 1116574#L3219 assume !(1 == ~expectedDirection~0); 1116572#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1116571#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1116569#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1116565#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1116563#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1116562#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1116561#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1116556#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1116552#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1111143#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1111144#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1113147#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1113143#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1113144#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1113148#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1113145#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1063156#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1063157#L2596-1 assume !(0 != timeShift_~tmp___9~2); 1111125#L2687-3 assume !(1 == ~doorState~0); 1111124#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1111122#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 1111123#L2205-2 assume !(0 == ~currentFloorID~0); 1117546#L2211-2 assume ~currentFloorID~0 > 0; 1059411#L2212-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1059412#L494-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1060661#L521-27 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1059395#L2216-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1057401#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1111150#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1111147#L2412-3 assume !(1 == ~currentHeading~0); 1111060#L2422-9 assume !(0 == ~currentFloorID~0); 1110732#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1110729#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1110726#L3207-1 assume !(-1 == ~expectedDirection~0); 1110723#L3219-1 assume !(1 == ~expectedDirection~0); 1110722#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1110721#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1110719#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1110612#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1110611#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1110608#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1110606#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1110603#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1109211#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1093602#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1093601#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1093594#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1093591#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1093592#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1114083#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1063159#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1063154#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1063145#L2596-2 assume !(0 != timeShift_~tmp___9~2); 1063147#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1105318#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1105316#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 1105317#L2205-4 assume !(0 == ~currentFloorID~0); 1110962#L2211-4 assume !(~currentFloorID~0 > 0); 1110960#L2226-4 assume ~currentFloorID~0 > 0; 1110937#L2228-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1110936#L2229-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1099332#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1099326#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1099324#L2412-6 assume !(1 == ~currentHeading~0); 1096428#L2422-18 assume !(0 == ~currentFloorID~0); 1096415#L2422-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1096407#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1096405#L3207-2 assume !(-1 == ~expectedDirection~0); 1096402#L3219-2 assume !(1 == ~expectedDirection~0); 1096400#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1096396#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1096393#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1096392#L765-1 assume 0 == initPersonOnFloor_~floor; 1096376#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1096350#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1096342#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1096343#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1100474#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1100473#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1100471#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1100472#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1105132#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1105124#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1100378#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1084598#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1084597#L494-63 assume !(0 == isFloorCalling_~floorID); 1084596#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1084586#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1084583#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1084584#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1084581#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1084577#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1084575#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1084574#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1084573#L2596-3 assume !(0 != timeShift_~tmp___9~2); 1076572#L2687-9 assume !(1 == ~doorState~0); 1076571#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1076567#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 1076568#L2205-6 assume !(0 == ~currentFloorID~0); 1076534#L2211-6 assume ~currentFloorID~0 > 0; 1076533#L2212-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1076514#L494-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1076499#L521-69 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1076478#L2216-6 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1076464#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1076460#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1076458#L2412-9 assume !(1 == ~currentHeading~0); 1076453#L2422-27 assume !(0 == ~currentFloorID~0); 1074737#L2422-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1074728#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1114407#L3207-3 assume !(-1 == ~expectedDirection~0); 1114391#L3219-3 assume !(1 == ~expectedDirection~0); 1114389#L3220-3 cleanup_~i~0 := 0; 1114386#L1268-2 [2018-12-08 17:21:13,354 INFO L796 eck$LassoCheckResult]: Loop: 1114386#L1268-2 assume !false; 1113427#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1108653#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 1104677#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 1104676#L1276 assume 1 != cleanup_~tmp___0~0; 1104675#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1100932#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1100933#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 1088658#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 1088657#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 1088656#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 1088655#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1088654#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1088652#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1088646#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1088647#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1088663#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1088659#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1088609#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1088608#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1088607#L494-89 assume !(0 == isFloorCalling_~floorID); 1088604#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1088598#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1088593#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1088594#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1088600#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1088597#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1088595#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1088596#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1088584#L2596-4 assume !(0 != timeShift_~tmp___9~2); 1083494#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1083493#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1083491#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 1083486#L2205-8 assume !(0 == ~currentFloorID~0); 1083480#L2211-8 assume ~currentFloorID~0 > 0; 1081024#L2212-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1083463#L494-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1083446#L521-95 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1083430#L2216-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1081036#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1081035#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1081034#L2412-12 assume !(1 == ~currentHeading~0); 1081031#L2422-36 assume !(0 == ~currentFloorID~0); 1080717#L2422-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1080718#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1114397#L3207-4 assume !(-1 == ~expectedDirection~0); 1114394#L3219-4 assume !(1 == ~expectedDirection~0); 1114388#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1114386#L1268-2 [2018-12-08 17:21:13,360 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:13,361 INFO L82 PathProgramCache]: Analyzing trace with hash 1134685114, now seen corresponding path program 1 times [2018-12-08 17:21:13,361 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:13,361 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:13,361 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:13,361 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:13,361 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:13,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:13,404 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:13,405 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:13,405 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:21:13,405 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:21:13,405 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:13,405 INFO L82 PathProgramCache]: Analyzing trace with hash 511972392, now seen corresponding path program 1 times [2018-12-08 17:21:13,405 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:13,405 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:13,406 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:13,406 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:13,406 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:13,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:13,424 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:13,424 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:13,424 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 17:21:13,424 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:21:13,425 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 17:21:13,425 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 17:21:13,425 INFO L87 Difference]: Start difference. First operand 72045 states and 133075 transitions. cyclomatic complexity: 61031 Second operand 5 states. [2018-12-08 17:21:14,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:21:14,107 INFO L93 Difference]: Finished difference Result 130791 states and 241253 transitions. [2018-12-08 17:21:14,107 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-08 17:21:14,107 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 130791 states and 241253 transitions. [2018-12-08 17:21:14,457 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 34040 [2018-12-08 17:21:14,730 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 130791 states to 130791 states and 241253 transitions. [2018-12-08 17:21:14,730 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 130791 [2018-12-08 17:21:14,807 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 130791 [2018-12-08 17:21:14,807 INFO L73 IsDeterministic]: Start isDeterministic. Operand 130791 states and 241253 transitions. [2018-12-08 17:21:14,869 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:21:14,869 INFO L705 BuchiCegarLoop]: Abstraction has 130791 states and 241253 transitions. [2018-12-08 17:21:14,930 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130791 states and 241253 transitions. [2018-12-08 17:21:15,656 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130791 to 128319. [2018-12-08 17:21:15,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 128319 states. [2018-12-08 17:21:15,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 128319 states to 128319 states and 237335 transitions. [2018-12-08 17:21:15,839 INFO L728 BuchiCegarLoop]: Abstraction has 128319 states and 237335 transitions. [2018-12-08 17:21:15,839 INFO L608 BuchiCegarLoop]: Abstraction has 128319 states and 237335 transitions. [2018-12-08 17:21:15,839 INFO L442 BuchiCegarLoop]: ======== Iteration 13============ [2018-12-08 17:21:15,839 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 128319 states and 237335 transitions. [2018-12-08 17:21:16,142 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 33344 [2018-12-08 17:21:16,142 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:21:16,142 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:21:16,144 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:16,144 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:16,145 INFO L794 eck$LassoCheckResult]: Stem: 1260699#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 1260700#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 1260306#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1260099#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 1260100#L1462 assume 0 != main_~tmp~11; 1260478#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1264176#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1260584#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1260567#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1260334#L765 assume 0 == initPersonOnFloor_~floor; 1259402#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1259021#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1263593#L557 assume !(0 == callOnFloor_~floorID); 1265377#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1260312#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1267053#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1267052#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1267051#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1267050#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1267047#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1267044#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1267011#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1267010#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1267009#L494 assume !(0 == isFloorCalling_~floorID); 1267008#L498 assume !(1 == isFloorCalling_~floorID); 1266962#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1266961#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1266960#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1266959#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1266958#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1266954#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1266952#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1266951#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1266949#L2596 assume !(0 != timeShift_~tmp___9~2); 1266948#L2687 assume !(1 == ~doorState~0); 1266947#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1266945#L2036 assume !(1 == stopRequestedInDirection_~dir); 1266944#L2205 assume !(0 == ~currentFloorID~0); 1266943#L2211 assume ~currentFloorID~0 > 0; 1266942#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1266941#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1266940#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1266929#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1265988#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1265989#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1266922#L2412 assume !(1 == ~currentHeading~0); 1266920#L2422 assume !(0 == ~currentFloorID~0); 1266918#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1266915#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1266913#L3207 assume !(-1 == ~expectedDirection~0); 1266908#L3219 assume !(1 == ~expectedDirection~0); 1266827#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1266822#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1266821#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1266820#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1266819#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1266817#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1266816#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1266815#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1266814#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1266813#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1266811#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1266810#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1266809#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1266804#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1266803#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1266801#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1266800#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1266798#L2596-1 assume !(0 != timeShift_~tmp___9~2); 1266797#L2687-3 assume !(1 == ~doorState~0); 1266796#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1266794#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 1266791#L2205-2 assume !(0 == ~currentFloorID~0); 1266792#L2211-2 assume ~currentFloorID~0 > 0; 1262297#L2212-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1264781#L494-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1264782#L521-27 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1262202#L2216-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1259327#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1268530#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1268525#L2412-3 assume !(1 == ~currentHeading~0); 1316601#L2422-9 assume !(0 == ~currentFloorID~0); 1267448#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1287629#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1311506#L3207-1 assume !(-1 == ~expectedDirection~0); 1311502#L3219-1 assume !(1 == ~expectedDirection~0); 1299977#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1299974#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1299975#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1299964#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1287618#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1299952#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1299954#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1299936#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1299938#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1299919#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1299920#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1309762#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1309758#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1309760#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1309763#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1309761#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1309755#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1309756#L2596-2 assume !(0 != timeShift_~tmp___9~2); 1316867#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1316864#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1316846#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 1316819#L2205-4 assume !(0 == ~currentFloorID~0); 1316820#L2211-4 assume !(~currentFloorID~0 > 0); 1337598#L2226-4 assume ~currentFloorID~0 > 0; 1337599#L2228-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1337661#L2229-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1337662#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1386375#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1261146#L2412-6 assume !(1 == ~currentHeading~0); 1261147#L2422-18 assume !(0 == ~currentFloorID~0); 1261006#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1358609#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1385941#L3207-2 assume !(-1 == ~expectedDirection~0); 1385938#L3219-2 assume !(1 == ~expectedDirection~0); 1316943#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1316892#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1316876#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1304596#L765-1 assume 0 == initPersonOnFloor_~floor; 1304573#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1304553#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1304551#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1304552#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1382733#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1382731#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1382729#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1283539#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1382726#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1382723#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1382722#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1382718#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1383271#L494-63 assume !(0 == isFloorCalling_~floorID); 1383267#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1383258#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1382638#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1382640#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1382646#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1382642#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1382641#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1382635#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1382636#L2596-3 assume !(0 != timeShift_~tmp___9~2); 1260142#L2687-9 assume !(1 == ~doorState~0); 1260136#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1260137#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 1261831#L2205-6 assume !(0 == ~currentFloorID~0); 1261832#L2211-6 assume ~currentFloorID~0 > 0; 1262275#L2212-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1264585#L494-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1264586#L521-69 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1262184#L2216-6 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1259305#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1387054#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1387302#L2412-9 assume !(1 == ~currentHeading~0); 1268555#L2422-27 assume !(0 == ~currentFloorID~0); 1261003#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1264099#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1264836#L3207-3 assume !(-1 == ~expectedDirection~0); 1387295#L3219-3 assume !(1 == ~expectedDirection~0); 1387293#L3220-3 cleanup_~i~0 := 0; 1387291#L1268-2 [2018-12-08 17:21:16,145 INFO L796 eck$LassoCheckResult]: Loop: 1387291#L1268-2 assume !false; 1387290#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1387289#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 1387288#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 1387287#L1276 assume 1 != cleanup_~tmp___0~0; 1387286#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1387285#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1265706#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 1265707#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 1386520#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 1386519#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 1382647#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1370129#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1370127#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1370125#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1269099#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1370123#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1370119#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1370114#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1370113#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1370112#L494-89 assume !(0 == isFloorCalling_~floorID); 1370109#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1370103#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1370100#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1370101#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1370105#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1370102#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1370099#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1370097#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1370096#L2596-4 assume !(0 != timeShift_~tmp___9~2); 1268517#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1268515#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1268511#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 1268512#L2205-8 assume !(0 == ~currentFloorID~0); 1268660#L2211-8 assume ~currentFloorID~0 > 0; 1268661#L2212-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1268656#L494-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1268657#L521-95 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1262194#L2216-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1259237#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1259238#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1387300#L2412-12 assume !(1 == ~currentHeading~0); 1268550#L2422-36 assume !(0 == ~currentFloorID~0); 1260953#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1301399#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1387297#L3207-4 assume !(-1 == ~expectedDirection~0); 1387294#L3219-4 assume !(1 == ~expectedDirection~0); 1387292#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1387291#L1268-2 [2018-12-08 17:21:16,153 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:16,153 INFO L82 PathProgramCache]: Analyzing trace with hash -1219273094, now seen corresponding path program 1 times [2018-12-08 17:21:16,153 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:16,153 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:16,153 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:16,153 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:16,153 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:16,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:16,183 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:16,183 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:16,183 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:21:16,184 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:21:16,184 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:16,184 INFO L82 PathProgramCache]: Analyzing trace with hash 513819434, now seen corresponding path program 1 times [2018-12-08 17:21:16,184 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:16,184 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:16,184 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:16,184 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:16,184 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:16,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:16,194 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:16,194 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:16,194 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-08 17:21:16,194 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:21:16,194 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-08 17:21:16,194 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-08 17:21:16,195 INFO L87 Difference]: Start difference. First operand 128319 states and 237335 transitions. cyclomatic complexity: 109017 Second operand 3 states. [2018-12-08 17:21:16,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:21:16,624 INFO L93 Difference]: Finished difference Result 166599 states and 307625 transitions. [2018-12-08 17:21:16,624 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-08 17:21:16,625 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 166599 states and 307625 transitions. [2018-12-08 17:21:17,066 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 42140 [2018-12-08 17:21:17,403 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 166599 states to 166599 states and 307625 transitions. [2018-12-08 17:21:17,404 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 166599 [2018-12-08 17:21:17,504 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 166599 [2018-12-08 17:21:17,505 INFO L73 IsDeterministic]: Start isDeterministic. Operand 166599 states and 307625 transitions. [2018-12-08 17:21:17,584 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:21:17,584 INFO L705 BuchiCegarLoop]: Abstraction has 166599 states and 307625 transitions. [2018-12-08 17:21:17,662 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166599 states and 307625 transitions. [2018-12-08 17:21:18,585 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166599 to 163655. [2018-12-08 17:21:18,585 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 163655 states. [2018-12-08 17:21:18,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 163655 states to 163655 states and 302601 transitions. [2018-12-08 17:21:18,764 INFO L728 BuchiCegarLoop]: Abstraction has 163655 states and 302601 transitions. [2018-12-08 17:21:18,764 INFO L608 BuchiCegarLoop]: Abstraction has 163655 states and 302601 transitions. [2018-12-08 17:21:18,764 INFO L442 BuchiCegarLoop]: ======== Iteration 14============ [2018-12-08 17:21:18,764 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 163655 states and 302601 transitions. [2018-12-08 17:21:19,075 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 41280 [2018-12-08 17:21:19,076 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:21:19,076 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:21:19,079 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:19,079 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:19,079 INFO L794 eck$LassoCheckResult]: Stem: 1555644#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 1555645#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 1555232#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1555024#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 1555025#L1462 assume 0 != main_~tmp~11; 1555407#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1559206#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1555524#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1555506#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1555258#L765 assume 0 == initPersonOnFloor_~floor; 1554329#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1553947#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1558614#L557 assume !(0 == callOnFloor_~floorID); 1560455#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1555237#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1562635#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1562634#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1562633#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1562632#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1562629#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1562626#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1562592#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1562591#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1562590#L494 assume !(0 == isFloorCalling_~floorID); 1562589#L498 assume !(1 == isFloorCalling_~floorID); 1562575#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1562574#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1562573#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1562572#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1562571#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1562567#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1562566#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1562565#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1562564#L2596 assume !(0 != timeShift_~tmp___9~2); 1562563#L2687 assume !(1 == ~doorState~0); 1562562#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1562560#L2036 assume !(1 == stopRequestedInDirection_~dir); 1562561#L2205 assume !(0 == ~currentFloorID~0); 1562885#L2211 assume ~currentFloorID~0 > 0; 1562217#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1562218#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1558572#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1558573#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1562490#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1562471#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1562468#L2412 assume !(1 == ~currentHeading~0); 1562464#L2422 assume !(0 == ~currentFloorID~0); 1562458#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1562450#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1562447#L3207 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1562445#L1884-1 __utac_acc__Specification3_spec__2_#t~ret161 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret161;havoc __utac_acc__Specification3_spec__2_#t~ret161; 1562443#L3211 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 1562440#L3219 assume !(1 == ~expectedDirection~0); 1562438#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1562437#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1562436#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1562435#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1562433#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1562432#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1562431#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1562430#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1562429#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1562428#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1562426#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1562425#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1562423#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1562416#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1562417#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1563263#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1563262#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1563260#L2596-1 assume !(0 != timeShift_~tmp___9~2); 1563259#L2687-3 assume !(1 == ~doorState~0); 1563258#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1563256#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 1563253#L2205-2 assume !(0 == ~currentFloorID~0); 1563254#L2211-2 assume ~currentFloorID~0 > 0; 1563285#L2212-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1575459#L494-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1575458#L521-27 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1575075#L2216-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1575069#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1575009#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1574993#L2412-3 assume !(1 == ~currentHeading~0); 1574985#L2422-9 assume !(0 == ~currentFloorID~0); 1563354#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1570644#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1574739#L3207-1 assume !(-1 == ~expectedDirection~0); 1574740#L3219-1 assume !(1 == ~expectedDirection~0); 1592413#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1574691#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1574692#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1574668#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1562322#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1574645#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1574643#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1574641#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1574639#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1574638#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1574636#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1574635#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1574634#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1574632#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1574629#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1574563#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1574565#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1574550#L2596-2 assume !(0 != timeShift_~tmp___9~2); 1574552#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1574536#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1574537#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 1582403#L2205-4 assume !(0 == ~currentFloorID~0); 1582404#L2211-4 assume !(~currentFloorID~0 > 0); 1582435#L2226-4 assume ~currentFloorID~0 > 0; 1582436#L2228-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1589119#L2229-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1554257#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1608679#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1556092#L2412-6 assume !(1 == ~currentHeading~0); 1556093#L2422-18 assume !(0 == ~currentFloorID~0); 1566425#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1566412#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1669731#L3207-2 assume !(-1 == ~expectedDirection~0); 1669729#L3219-2 assume !(1 == ~expectedDirection~0); 1669727#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1609697#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1609694#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1609693#L765-1 assume 0 == initPersonOnFloor_~floor; 1609679#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1609330#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1609324#L557-2 assume !(0 == callOnFloor_~floorID); 1609326#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1609943#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1609944#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1651071#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1651069#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1566241#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1609894#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1609891#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1609886#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1609881#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1609868#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1608806#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1608798#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1608795#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1608792#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1608793#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1609190#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1609189#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1609188#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1609186#L2596-3 assume !(0 != timeShift_~tmp___9~2); 1609185#L2687-9 assume !(1 == ~doorState~0); 1609184#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1609182#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 1608705#L2205-6 assume !(0 == ~currentFloorID~0); 1608707#L2211-6 assume !(~currentFloorID~0 > 0); 1620618#L2226-6 assume ~currentFloorID~0 > 0; 1620619#L2228-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1641910#L2229-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1641885#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1641883#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1620396#L2412-9 assume !(1 == ~currentHeading~0); 1620080#L2422-27 assume !(0 == ~currentFloorID~0); 1620060#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1620050#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1698303#L3207-3 assume !(-1 == ~expectedDirection~0); 1698290#L3219-3 assume !(1 == ~expectedDirection~0); 1698269#L3220-3 cleanup_~i~0 := 0; 1698235#L1268-2 [2018-12-08 17:21:19,079 INFO L796 eck$LassoCheckResult]: Loop: 1698235#L1268-2 assume !false; 1698226#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1698221#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 1698217#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 1698213#L1276 assume 1 != cleanup_~tmp___0~0; 1698209#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1698205#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1698201#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 1697723#L1940 assume !(0 != anyStopRequested_~tmp___3~0); 1561083#L1944 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 1554232#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 1554233#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 1669715#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1669716#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1675980#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1675979#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1619999#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1645425#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1645420#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1645417#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1645411#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1645409#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1645407#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1643406#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1643405#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1643403#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1643400#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1643398#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1643397#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1643396#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1643392#L2596-4 assume !(0 != timeShift_~tmp___9~2); 1643389#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1643387#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1640316#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 1640306#L2205-8 assume !(0 == ~currentFloorID~0); 1640307#L2211-8 assume !(~currentFloorID~0 > 0); 1642402#L2226-8 assume ~currentFloorID~0 > 0; 1642403#L2228-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1648372#L2229-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1643078#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1648320#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1642270#L2412-12 assume !(1 == ~currentHeading~0); 1640075#L2422-36 assume !(0 == ~currentFloorID~0); 1639355#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1639350#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1698300#L3207-4 assume !(-1 == ~expectedDirection~0); 1698289#L3219-4 assume !(1 == ~expectedDirection~0); 1698268#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1698235#L1268-2 [2018-12-08 17:21:19,088 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:19,089 INFO L82 PathProgramCache]: Analyzing trace with hash -315534265, now seen corresponding path program 1 times [2018-12-08 17:21:19,089 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:19,089 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:19,089 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:19,089 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:19,089 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:19,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:19,135 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:19,135 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:19,135 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:21:19,135 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:21:19,135 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:19,136 INFO L82 PathProgramCache]: Analyzing trace with hash -1964423693, now seen corresponding path program 1 times [2018-12-08 17:21:19,136 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:19,136 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:19,136 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:19,136 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:19,136 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:19,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:19,148 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:19,148 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:19,148 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-08 17:21:19,148 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:21:19,149 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-08 17:21:19,149 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-08 17:21:19,149 INFO L87 Difference]: Start difference. First operand 163655 states and 302601 transitions. cyclomatic complexity: 138947 Second operand 5 states. [2018-12-08 17:21:22,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:21:22,726 INFO L93 Difference]: Finished difference Result 279422 states and 518441 transitions. [2018-12-08 17:21:22,726 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-12-08 17:21:22,726 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 279422 states and 518441 transitions. [2018-12-08 17:21:23,521 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 72983 [2018-12-08 17:21:24,171 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 279422 states to 278310 states and 516539 transitions. [2018-12-08 17:21:24,172 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 278310 [2018-12-08 17:21:24,347 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 278310 [2018-12-08 17:21:24,347 INFO L73 IsDeterministic]: Start isDeterministic. Operand 278310 states and 516539 transitions. [2018-12-08 17:21:24,480 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:21:24,480 INFO L705 BuchiCegarLoop]: Abstraction has 278310 states and 516539 transitions. [2018-12-08 17:21:24,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278310 states and 516539 transitions. [2018-12-08 17:21:28,794 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278310 to 162857. [2018-12-08 17:21:28,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 162857 states. [2018-12-08 17:21:28,968 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162857 states to 162857 states and 300867 transitions. [2018-12-08 17:21:28,968 INFO L728 BuchiCegarLoop]: Abstraction has 162857 states and 300867 transitions. [2018-12-08 17:21:28,969 INFO L608 BuchiCegarLoop]: Abstraction has 162857 states and 300867 transitions. [2018-12-08 17:21:28,969 INFO L442 BuchiCegarLoop]: ======== Iteration 15============ [2018-12-08 17:21:28,969 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 162857 states and 300867 transitions. [2018-12-08 17:21:29,253 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 41118 [2018-12-08 17:21:29,254 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:21:29,254 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:21:29,256 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:29,256 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:29,257 INFO L794 eck$LassoCheckResult]: Stem: 2001831#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 2001832#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 2000562#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1999969#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 1999970#L1462 assume 0 != main_~tmp~11; 2001329#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2000149#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 2000150#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1999822#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1999823#L765 assume 0 == initPersonOnFloor_~floor; 1998416#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1997082#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1998929#L557 assume !(0 == callOnFloor_~floorID); 2002458#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2000571#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1997076#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1997077#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1998726#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1998727#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2001184#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2001741#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 2001742#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2005867#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2005863#L494 assume !(0 == isFloorCalling_~floorID); 2005861#L498 assume !(1 == isFloorCalling_~floorID); 2005858#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2005857#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2005856#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2005224#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2005225#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2005831#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2005829#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2005828#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2005826#L2596 assume !(0 != timeShift_~tmp___9~2); 2005825#L2687 assume !(1 == ~doorState~0); 2005824#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2005822#L2036 assume !(1 == stopRequestedInDirection_~dir); 2005821#L2205 assume !(0 == ~currentFloorID~0); 2005820#L2211 assume ~currentFloorID~0 > 0; 2005819#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2005818#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1998812#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1998813#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2005569#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2005564#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2005556#L2412 assume !(1 == ~currentHeading~0); 2005551#L2422 assume !(0 == ~currentFloorID~0); 2005546#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2005543#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2005542#L3207 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2005536#L1884-1 __utac_acc__Specification3_spec__2_#t~ret161 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret161;havoc __utac_acc__Specification3_spec__2_#t~ret161; 2005537#L3211 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 2005534#L3219 assume !(1 == ~expectedDirection~0); 2005530#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2005529#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2005528#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2005527#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2005526#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2005525#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2005524#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2005523#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2005521#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2005520#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2005518#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2005517#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2005516#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2005515#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2005514#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2005512#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2005511#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2005509#L2596-1 assume !(0 != timeShift_~tmp___9~2); 2005508#L2687-3 assume !(1 == ~doorState~0); 2005507#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2005505#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 2005506#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2005459#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2005995#L2695-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 2005450#L2467-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 2005868#L2472-2 timeShift_#t~ret99 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2005688#L2036-3 assume !(1 == stopRequestedInDirection_~dir); 2005574#L2205-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2005566#L2358-3 timeShift_#t~ret100 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 2005557#L2704-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2005552#L2412-5 assume !(1 == ~currentHeading~0); 2005547#L2422-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2005443#L2422-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2005441#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2010976#L3207-1 assume !(-1 == ~expectedDirection~0); 2010970#L3219-1 assume !(1 == ~expectedDirection~0); 2010969#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2010968#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2010967#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2010965#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2010966#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2011137#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2011127#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2011089#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2011082#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2011078#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2011071#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2011063#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2010933#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2010925#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2010923#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2010919#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2010917#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2010914#L2596-2 assume !(0 != timeShift_~tmp___9~2); 2010912#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 2010910#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2010906#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 2010907#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2010808#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2040963#L2695-2 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 2010788#L2467-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 2040896#L2472-4 timeShift_#t~ret99 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2040638#L2036-5 assume !(1 == stopRequestedInDirection_~dir); 2040583#L2205-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2040562#L2358-5 timeShift_#t~ret100 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 2040560#L2704-2 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2040561#L2412-8 assume !(1 == ~currentHeading~0); 2040662#L2422-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2010777#L2422-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2010776#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2010773#L3207-2 assume !(-1 == ~expectedDirection~0); 2010771#L3219-2 assume !(1 == ~expectedDirection~0); 2010768#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 2010764#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 2010755#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2010753#L765-1 assume 0 == initPersonOnFloor_~floor; 2010703#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2010682#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2010678#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2010679#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2056928#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2056926#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2056923#L3076-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 2056920#L3077-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2055556#L1849-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2055557#L1870-33 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2055552#L3081-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 2055539#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2010560#L494-63 assume !(0 == isFloorCalling_~floorID); 2010561#L498-63 assume !(1 == isFloorCalling_~floorID); 2010544#L502-63 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2010545#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2055525#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2055519#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 2055520#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2056268#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2056266#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2056265#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2056263#L2596-3 assume !(0 != timeShift_~tmp___9~2); 2056262#L2687-9 assume !(1 == ~doorState~0); 2056261#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2056259#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 2056258#L2205-6 assume !(0 == ~currentFloorID~0); 2056257#L2211-6 assume !(~currentFloorID~0 > 0); 2055591#L2226-6 assume ~currentFloorID~0 > 0; 2055587#L2228-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2055582#L2229-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2010381#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2088877#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2088878#L2412-9 assume !(1 == ~currentHeading~0); 2089685#L2422-27 assume !(0 == ~currentFloorID~0); 2089651#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2088152#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2117132#L3207-3 assume !(-1 == ~expectedDirection~0); 2117127#L3219-3 assume !(1 == ~expectedDirection~0); 2117100#L3220-3 cleanup_~i~0 := 0; 2117092#L1268-2 [2018-12-08 17:21:29,257 INFO L796 eck$LassoCheckResult]: Loop: 2117092#L1268-2 assume !false; 2117093#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2117087#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 2117088#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 2117081#L1276 assume 1 != cleanup_~tmp___0~0; 2117082#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2117075#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2117076#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 2117071#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 2117070#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 2117069#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 2117068#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2117067#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2117066#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2117065#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2082878#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2117063#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2117061#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2117059#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2117058#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2117057#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2117056#L494-89 assume !(0 == isFloorCalling_~floorID); 2117054#L498-89 assume !(1 == isFloorCalling_~floorID); 2117046#L502-89 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2117044#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2117043#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2117042#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 2117039#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2117037#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2117035#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2117034#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2117031#L2596-4 assume !(0 != timeShift_~tmp___9~2); 2117032#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 2117778#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2117768#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 2117766#L2205-8 assume !(0 == ~currentFloorID~0); 2117767#L2211-8 assume !(~currentFloorID~0 > 0); 2119364#L2226-8 assume ~currentFloorID~0 > 0; 2119365#L2228-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2117673#L2229-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2117669#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2117665#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2117661#L2412-12 assume !(1 == ~currentHeading~0); 2091174#L2422-36 assume !(0 == ~currentFloorID~0); 2091171#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2089087#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2117241#L3207-4 assume !(-1 == ~expectedDirection~0); 2117236#L3219-4 assume !(1 == ~expectedDirection~0); 2117229#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 2117092#L1268-2 [2018-12-08 17:21:29,267 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:29,268 INFO L82 PathProgramCache]: Analyzing trace with hash -206192336, now seen corresponding path program 1 times [2018-12-08 17:21:29,268 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:29,268 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:29,268 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:29,268 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:29,268 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:29,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:29,300 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:29,300 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:29,300 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:21:29,300 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:21:29,300 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:29,300 INFO L82 PathProgramCache]: Analyzing trace with hash 1530580663, now seen corresponding path program 1 times [2018-12-08 17:21:29,300 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:29,300 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:29,301 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:29,301 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:29,301 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:29,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:29,336 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:29,336 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:29,336 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-08 17:21:29,336 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-08 17:21:29,336 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-12-08 17:21:29,336 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-12-08 17:21:29,336 INFO L87 Difference]: Start difference. First operand 162857 states and 300867 transitions. cyclomatic complexity: 138011 Second operand 7 states. [2018-12-08 17:21:34,143 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:21:34,143 INFO L93 Difference]: Finished difference Result 307394 states and 561845 transitions. [2018-12-08 17:21:34,144 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-12-08 17:21:34,144 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 307394 states and 561845 transitions. [2018-12-08 17:21:35,042 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 77657 [2018-12-08 17:21:35,734 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 307394 states to 307394 states and 561845 transitions. [2018-12-08 17:21:35,734 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 307394 [2018-12-08 17:21:36,301 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 307394 [2018-12-08 17:21:36,301 INFO L73 IsDeterministic]: Start isDeterministic. Operand 307394 states and 561845 transitions. [2018-12-08 17:21:36,397 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:21:36,397 INFO L705 BuchiCegarLoop]: Abstraction has 307394 states and 561845 transitions. [2018-12-08 17:21:36,501 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 307394 states and 561845 transitions. [2018-12-08 17:21:38,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 307394 to 217501. [2018-12-08 17:21:38,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 217501 states. [2018-12-08 17:21:38,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 217501 states to 217501 states and 402487 transitions. [2018-12-08 17:21:38,266 INFO L728 BuchiCegarLoop]: Abstraction has 217501 states and 402487 transitions. [2018-12-08 17:21:38,266 INFO L608 BuchiCegarLoop]: Abstraction has 217501 states and 402487 transitions. [2018-12-08 17:21:38,266 INFO L442 BuchiCegarLoop]: ======== Iteration 16============ [2018-12-08 17:21:38,266 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 217501 states and 402487 transitions. [2018-12-08 17:21:38,706 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 55738 [2018-12-08 17:21:38,706 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-08 17:21:38,706 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-08 17:21:38,709 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:38,709 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-08 17:21:38,709 INFO L794 eck$LassoCheckResult]: Stem: 2472121#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~head~0.base, ~head~0.offset := 0, 0;call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~expectedDirection~0 := 0; 2472122#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 2470869#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 2470283#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 2470284#L1462 assume 0 != main_~tmp~11; 2471649#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2470461#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 2470462#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 2470136#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2470137#L765 assume 0 == initPersonOnFloor_~floor; 2468727#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2467367#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2469256#L557 assume !(0 == callOnFloor_~floorID); 2472773#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2470877#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2474789#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2474788#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2474787#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2474786#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2474785#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2474784#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 2474783#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2467502#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2474981#L494 assume !(0 == isFloorCalling_~floorID); 2474980#L498 assume !(1 == isFloorCalling_~floorID); 2474979#L502 assume !(2 == isFloorCalling_~floorID); 2474977#L506 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2474976#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2474975#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2474974#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2474973#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2474969#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2474967#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2474966#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2474964#L2596 assume !(0 != timeShift_~tmp___9~2); 2474963#L2687 assume !(1 == ~doorState~0); 2474962#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2474960#L2036 assume !(1 == stopRequestedInDirection_~dir); 2474961#L2205 assume !(0 == ~currentFloorID~0); 2475055#L2211 assume ~currentFloorID~0 > 0; 2475048#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2475041#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2475030#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 2475021#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2474955#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2474599#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2474591#L2412 assume !(1 == ~currentHeading~0); 2474583#L2422 assume !(0 == ~currentFloorID~0); 2474577#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2474570#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2474564#L3207 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2474560#L1884-1 __utac_acc__Specification3_spec__2_#t~ret161 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret161;havoc __utac_acc__Specification3_spec__2_#t~ret161; 2474558#L3211 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 2474549#L3219 assume !(1 == ~expectedDirection~0); 2474545#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2474543#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2474540#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2474538#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2474531#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2474527#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2474520#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2474515#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2474512#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2474510#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2474508#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2474507#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2474506#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2474505#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2474504#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2474502#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2474501#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2474499#L2596-1 assume !(0 != timeShift_~tmp___9~2); 2474498#L2687-3 assume !(1 == ~doorState~0); 2474497#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2474495#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 2474496#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2474493#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2480786#L2695-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 2480513#L2467-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 2480647#L2472-2 timeShift_#t~ret99 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2480638#L2036-3 assume !(1 == stopRequestedInDirection_~dir); 2480598#L2205-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2480576#L2358-3 timeShift_#t~ret100 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 2480514#L2704-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2480504#L2412-5 assume !(1 == ~currentHeading~0); 2480495#L2422-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2480489#L2422-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2480484#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2480481#L3207-1 assume !(-1 == ~expectedDirection~0); 2480462#L3219-1 assume !(1 == ~expectedDirection~0); 2480459#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2480457#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2480452#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2480449#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2480446#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2480444#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2480442#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2480439#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2480412#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2476815#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2476788#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2476769#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2476767#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2476765#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2476763#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2476759#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2476761#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2487261#L2596-2 assume !(0 != timeShift_~tmp___9~2); 2487260#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 2487259#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2487257#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 2487258#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2487255#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2537835#L2695-2 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 2497382#L2467-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 2537832#L2472-4 timeShift_#t~ret99 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2537829#L2036-5 assume !(1 == stopRequestedInDirection_~dir); 2537826#L2205-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2467981#L2358-5 timeShift_#t~ret100 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 2497362#L2704-2 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2497363#L2412-8 assume !(1 == ~currentHeading~0); 2522541#L2422-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2497340#L2422-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2497339#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2497337#L3207-2 assume !(-1 == ~expectedDirection~0); 2497336#L3219-2 assume !(1 == ~expectedDirection~0); 2497330#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 2497326#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 2497323#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2497322#L765-1 assume 0 == initPersonOnFloor_~floor; 2497307#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2497287#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2497285#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2497286#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2513459#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2513457#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2513455#L3076-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 2513449#L3077-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2513450#L1849-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2509158#L1870-33 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2509130#L3081-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 2509020#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2491742#L494-63 assume !(0 == isFloorCalling_~floorID); 2491741#L498-63 assume !(1 == isFloorCalling_~floorID); 2491740#L502-63 assume !(2 == isFloorCalling_~floorID); 2491738#L506-63 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2491733#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2491730#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2491731#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 2491737#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2491732#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2491729#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2491727#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2491725#L2596-3 assume !(0 != timeShift_~tmp___9~2); 2491726#L2687-9 assume !(1 == ~doorState~0); 2513905#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2513903#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 2513904#L2205-6 assume !(0 == ~currentFloorID~0); 2523410#L2211-6 assume !(~currentFloorID~0 > 0); 2523408#L2226-6 assume ~currentFloorID~0 > 0; 2523409#L2228-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2681666#L2229-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2681603#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2681591#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2681590#L2412-9 assume !(1 == ~currentHeading~0); 2513368#L2422-27 assume !(0 == ~currentFloorID~0); 2513362#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2513354#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2522769#L3207-3 assume !(-1 == ~expectedDirection~0); 2522745#L3219-3 assume !(1 == ~expectedDirection~0); 2522703#L3220-3 cleanup_~i~0 := 0; 2522701#L1268-2 [2018-12-08 17:21:38,710 INFO L796 eck$LassoCheckResult]: Loop: 2522701#L1268-2 assume !false; 2522700#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2522698#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 2522695#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 2522510#L1276 assume 1 != cleanup_~tmp___0~0; 2520043#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2520041#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2520040#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 2520039#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 2518716#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 2520038#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 2520037#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2520036#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2520035#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2520034#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2504438#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2520033#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2600013#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 2599991#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2599979#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2596867#L494-89 assume !(0 == isFloorCalling_~floorID); 2596849#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2596850#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2635806#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2635805#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 2635789#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2635786#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2635784#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2635783#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2635776#L2596-4 assume !(0 != timeShift_~tmp___9~2); 2540330#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 2540327#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2540323#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 2540320#L2205-8 assume !(0 == ~currentFloorID~0); 2540315#L2211-8 assume ~currentFloorID~0 > 0; 2540301#L2212-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2540296#L494-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2540288#L521-95 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 2540272#L2216-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2540045#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2540039#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2540030#L2412-12 assume !(1 == ~currentHeading~0); 2540025#L2422-36 assume !(0 == ~currentFloorID~0); 2523011#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2523008#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2523005#L3207-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2522830#L1884-13 __utac_acc__Specification3_spec__2_#t~ret161 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret161;havoc __utac_acc__Specification3_spec__2_#t~ret161; 2523001#L3211-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 2522768#L3219-4 assume !(1 == ~expectedDirection~0); 2522702#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 2522701#L1268-2 [2018-12-08 17:21:38,721 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:38,721 INFO L82 PathProgramCache]: Analyzing trace with hash 595606752, now seen corresponding path program 1 times [2018-12-08 17:21:38,721 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:38,721 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:38,722 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:38,722 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:38,722 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:38,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:38,752 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:38,752 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-08 17:21:38,753 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-08 17:21:38,753 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-08 17:21:38,753 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:38,753 INFO L82 PathProgramCache]: Analyzing trace with hash -152654267, now seen corresponding path program 1 times [2018-12-08 17:21:38,753 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-08 17:21:38,753 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-08 17:21:38,753 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:38,754 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-08 17:21:38,754 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-08 17:21:38,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-12-08 17:21:38,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-12-08 17:21:39,131 WARN L180 SmtUtils]: Spent 345.00 ms on a formula simplification. DAG size of input: 189 DAG size of output: 157 [2018-12-08 17:21:39,694 WARN L180 SmtUtils]: Spent 556.00 ms on a formula simplification that was a NOOP. DAG size: 127 [2018-12-08 17:21:39,701 INFO L216 LassoAnalysis]: Preferences: [2018-12-08 17:21:39,702 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-12-08 17:21:39,702 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-12-08 17:21:39,702 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-12-08 17:21:39,702 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-12-08 17:21:39,702 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 17:21:39,702 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-12-08 17:21:39,702 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-12-08 17:21:39,702 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product25_true-unreach-call_true-termination.cil.c_Iteration16_Loop [2018-12-08 17:21:39,702 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-12-08 17:21:39,702 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-12-08 17:21:39,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,730 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,734 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,737 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,743 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,744 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,745 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,745 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,746 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,747 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,748 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,750 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,761 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,763 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,765 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,766 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,770 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,772 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,775 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,777 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,777 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,778 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,781 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,782 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,783 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,784 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,793 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,794 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,795 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,795 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,796 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,797 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,797 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,798 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,809 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,810 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,814 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,815 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,821 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,825 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,826 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,827 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,828 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,829 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,830 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,831 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,832 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,833 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,834 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,836 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,837 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,840 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,841 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,845 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,846 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,847 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,848 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,848 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,849 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,850 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,851 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,852 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,857 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,860 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,863 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,864 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,864 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,865 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,866 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,867 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,868 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,873 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,878 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,879 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,886 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,887 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,888 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,889 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,895 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,897 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,898 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,899 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:39,900 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,273 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-12-08 17:21:40,274 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 17:21:40,282 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 17:21:40,282 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 17:21:40,288 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 17:21:40,288 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_isIdle_~retValue_acc~17=0, ULTIMATE.start_cleanup_~tmp~9=0} Honda state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_isIdle_~retValue_acc~17=0, ULTIMATE.start_cleanup_~tmp~9=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 17:21:40,307 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 17:21:40,307 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 17:21:40,309 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 17:21:40,309 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 17:21:40,325 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 17:21:40,325 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 17:21:40,327 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 17:21:40,327 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 17:21:40,343 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 17:21:40,343 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 17:21:40,345 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 17:21:40,345 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret151=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret151=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 17:21:40,361 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 17:21:40,361 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 17:21:40,363 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-08 17:21:40,363 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret159=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret159=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 17:21:40,378 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-08 17:21:40,378 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_fef945cc-1242-4237-8c68-4e07e8e8dbe9/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 17:21:40,396 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-12-08 17:21:40,396 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-08 17:21:40,781 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-12-08 17:21:40,783 INFO L216 LassoAnalysis]: Preferences: [2018-12-08 17:21:40,783 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-12-08 17:21:40,783 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-12-08 17:21:40,783 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-12-08 17:21:40,784 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-12-08 17:21:40,784 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-08 17:21:40,784 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-12-08 17:21:40,784 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-12-08 17:21:40,784 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product25_true-unreach-call_true-termination.cil.c_Iteration16_Loop [2018-12-08 17:21:40,784 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-12-08 17:21:40,784 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-12-08 17:21:40,788 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,795 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,796 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,798 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,799 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,800 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,804 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,806 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,807 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,808 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,809 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,812 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,825 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,826 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,827 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,828 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,829 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,838 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,845 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,847 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,848 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,849 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,851 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,852 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,856 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,857 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,859 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,860 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,862 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,863 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,876 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,886 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,894 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,895 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,897 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,898 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,903 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,905 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,907 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,908 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,910 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,911 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,912 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,914 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,915 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,916 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,917 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,921 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,922 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,925 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,933 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,935 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,936 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,938 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,939 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,940 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,947 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,949 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,951 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,953 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,954 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,956 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,957 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,959 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,960 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,962 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,963 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,965 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,967 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,968 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,970 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,973 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,974 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,985 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,990 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,997 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:40,999 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,000 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,002 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,004 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,005 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,010 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,011 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,012 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,013 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,016 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,017 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,018 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,021 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,022 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,023 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,033 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,034 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,035 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,035 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,036 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-08 17:21:41,384 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-12-08 17:21:41,387 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-12-08 17:21:41,389 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 17:21:41,389 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 17:21:41,390 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 17:21:41,390 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 17:21:41,390 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 17:21:41,390 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 17:21:41,391 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 17:21:41,391 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 17:21:41,393 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 17:21:41,393 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 17:21:41,394 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 17:21:41,394 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 17:21:41,394 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 17:21:41,394 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 17:21:41,394 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 17:21:41,394 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 17:21:41,394 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 17:21:41,395 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 17:21:41,395 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 17:21:41,395 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 17:21:41,395 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 17:21:41,395 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 17:21:41,395 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 17:21:41,395 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 17:21:41,395 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 17:21:41,395 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 17:21:41,396 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 17:21:41,396 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 17:21:41,396 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 17:21:41,396 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 17:21:41,396 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 17:21:41,396 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 17:21:41,396 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 17:21:41,397 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 17:21:41,397 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 17:21:41,397 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 17:21:41,397 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 17:21:41,397 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 17:21:41,397 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 17:21:41,398 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 17:21:41,398 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 17:21:41,398 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 17:21:41,398 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 17:21:41,398 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 17:21:41,398 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-08 17:21:41,398 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-08 17:21:41,399 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-08 17:21:41,399 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-08 17:21:41,399 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-08 17:21:41,399 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-08 17:21:41,399 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-08 17:21:41,399 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-08 17:21:41,399 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-08 17:21:41,401 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-12-08 17:21:41,403 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-12-08 17:21:41,403 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-12-08 17:21:41,404 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-12-08 17:21:41,405 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-12-08 17:21:41,405 INFO L518 LassoAnalysis]: Proved termination. [2018-12-08 17:21:41,405 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~0) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~0 Supporting invariants [] [2018-12-08 17:21:41,405 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-12-08 17:21:41,422 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 17:21:41,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:41,555 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-12-08 17:21:41,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 17:21:41,590 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-12-08 17:21:41,614 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 17:21:41,618 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-12-08 17:21:41,619 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 217501 states and 402487 transitions. cyclomatic complexity: 184987 Second operand 5 states. [2018-12-08 17:21:42,855 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 217501 states and 402487 transitions. cyclomatic complexity: 184987. Second operand 5 states. Result 273239 states and 505159 transitions. Complement of second has 8 states. [2018-12-08 17:21:42,856 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-12-08 17:21:42,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-12-08 17:21:42,864 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 11129 transitions. [2018-12-08 17:21:42,865 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11129 transitions. Stem has 171 letters. Loop has 50 letters. [2018-12-08 17:21:42,867 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-08 17:21:42,867 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11129 transitions. Stem has 221 letters. Loop has 50 letters. [2018-12-08 17:21:42,868 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-08 17:21:42,868 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11129 transitions. Stem has 171 letters. Loop has 100 letters. [2018-12-08 17:21:42,869 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-08 17:21:42,869 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 273239 states and 505159 transitions. [2018-12-08 17:21:45,765 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-08 17:21:45,765 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 273239 states to 0 states and 0 transitions. [2018-12-08 17:21:45,765 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-12-08 17:21:45,766 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-12-08 17:21:45,766 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-12-08 17:21:45,766 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:21:45,766 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-08 17:21:45,766 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-08 17:21:45,766 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-12-08 17:21:45,766 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-12-08 17:21:45,766 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2018-12-08 17:21:45,766 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-08 17:21:45,766 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-12-08 17:21:45,766 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-12-08 17:21:45,766 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-12-08 17:21:45,766 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-08 17:21:45,766 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-12-08 17:21:45,767 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-12-08 17:21:45,767 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-12-08 17:21:45,767 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-12-08 17:21:45,767 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-08 17:21:45,767 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-08 17:21:45,767 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-08 17:21:45,767 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-08 17:21:45,767 INFO L442 BuchiCegarLoop]: ======== Iteration 17============ [2018-12-08 17:21:45,767 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-12-08 17:21:45,767 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-08 17:21:45,767 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-12-08 17:21:45,772 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 08.12 05:21:45 BoogieIcfgContainer [2018-12-08 17:21:45,772 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-12-08 17:21:45,772 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-12-08 17:21:45,772 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-12-08 17:21:45,773 INFO L276 PluginConnector]: Witness Printer initialized [2018-12-08 17:21:45,773 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.12 05:20:43" (3/4) ... [2018-12-08 17:21:45,776 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-12-08 17:21:45,776 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-12-08 17:21:45,776 INFO L168 Benchmark]: Toolchain (without parser) took 67996.34 ms. Allocated memory was 1.0 GB in the beginning and 6.5 GB in the end (delta: 5.4 GB). Free memory was 951.7 MB in the beginning and 5.2 GB in the end (delta: -4.2 GB). Peak memory consumption was 1.2 GB. Max. memory is 11.5 GB. [2018-12-08 17:21:45,777 INFO L168 Benchmark]: CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 979.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-12-08 17:21:45,777 INFO L168 Benchmark]: CACSL2BoogieTranslator took 426.31 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 136.8 MB). Free memory was 951.7 MB in the beginning and 1.1 GB in the end (delta: -147.2 MB). Peak memory consumption was 50.1 MB. Max. memory is 11.5 GB. [2018-12-08 17:21:45,778 INFO L168 Benchmark]: Boogie Procedure Inliner took 171.01 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 63.0 MB). Peak memory consumption was 63.0 MB. Max. memory is 11.5 GB. [2018-12-08 17:21:45,778 INFO L168 Benchmark]: Boogie Preprocessor took 177.95 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 971.6 MB in the end (delta: 64.3 MB). Peak memory consumption was 64.3 MB. Max. memory is 11.5 GB. [2018-12-08 17:21:45,778 INFO L168 Benchmark]: RCFGBuilder took 5185.98 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 403.7 MB). Free memory was 971.6 MB in the beginning and 1.4 GB in the end (delta: -468.7 MB). Peak memory consumption was 427.6 MB. Max. memory is 11.5 GB. [2018-12-08 17:21:45,779 INFO L168 Benchmark]: BuchiAutomizer took 62028.90 ms. Allocated memory was 1.6 GB in the beginning and 6.5 GB in the end (delta: 4.9 GB). Free memory was 1.4 GB in the beginning and 5.2 GB in the end (delta: -3.7 GB). Peak memory consumption was 1.2 GB. Max. memory is 11.5 GB. [2018-12-08 17:21:45,779 INFO L168 Benchmark]: Witness Printer took 3.44 ms. Allocated memory is still 6.5 GB. Free memory is still 5.2 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-12-08 17:21:45,781 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 979.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 426.31 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 136.8 MB). Free memory was 951.7 MB in the beginning and 1.1 GB in the end (delta: -147.2 MB). Peak memory consumption was 50.1 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 171.01 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 63.0 MB). Peak memory consumption was 63.0 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 177.95 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 971.6 MB in the end (delta: 64.3 MB). Peak memory consumption was 64.3 MB. Max. memory is 11.5 GB. * RCFGBuilder took 5185.98 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 403.7 MB). Free memory was 971.6 MB in the beginning and 1.4 GB in the end (delta: -468.7 MB). Peak memory consumption was 427.6 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 62028.90 ms. Allocated memory was 1.6 GB in the beginning and 6.5 GB in the end (delta: 4.9 GB). Free memory was 1.4 GB in the beginning and 5.2 GB in the end (delta: -3.7 GB). Peak memory consumption was 1.2 GB. Max. memory is 11.5 GB. * Witness Printer took 3.44 ms. Allocated memory is still 6.5 GB. Free memory is still 5.2 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 17 terminating modules (16 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 16 modules have a trivial ranking function, the largest among these consists of 7 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 62.0s and 17 iterations. TraceHistogramMax:1. Analysis of lassos took 4.0s. Construction of modules took 17.2s. Büchi inclusion checks took 11.8s. Highest rank in rank-based complementation 3. Minimization of det autom 17. Minimization of nondet autom 0. Automata minimization 13.7s AutomataMinimizationTime, 15 MinimizatonAttempts, 491646 StatesRemovedByMinimization, 15 NontrivialMinimizations. Non-live state removal took 10.7s Buchi closure took 1.3s. Biggest automaton had 217501 states and ocurred in iteration 15. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 299413 SDtfs, 639886 SDslu, 506233 SDs, 0 SdLazy, 34139 SolverSat, 3628 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 17.2s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI15 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital185 mio100 ax100 hnf101 lsp17 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq221 hnf87 smp100 dnf187 smp100 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 4ms VariablesStem: 0 VariablesLoop: 3 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 5 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.4s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...