./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product01_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 635dfa2a Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product01_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5f6e99961ac853f3709ebf596b9583b8c3fd14e8 ....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-635dfa2 [2018-12-09 10:49:02,032 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-12-09 10:49:02,033 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-12-09 10:49:02,039 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-12-09 10:49:02,039 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-12-09 10:49:02,039 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-12-09 10:49:02,040 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-12-09 10:49:02,041 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-12-09 10:49:02,041 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-12-09 10:49:02,042 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-12-09 10:49:02,042 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-12-09 10:49:02,042 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-12-09 10:49:02,043 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-12-09 10:49:02,043 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-12-09 10:49:02,044 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-12-09 10:49:02,044 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-12-09 10:49:02,044 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-12-09 10:49:02,045 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-12-09 10:49:02,046 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-12-09 10:49:02,047 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-12-09 10:49:02,047 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-12-09 10:49:02,048 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-12-09 10:49:02,049 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-12-09 10:49:02,049 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-12-09 10:49:02,049 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-12-09 10:49:02,049 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-12-09 10:49:02,050 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-12-09 10:49:02,050 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-12-09 10:49:02,051 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-12-09 10:49:02,051 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-12-09 10:49:02,051 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-12-09 10:49:02,052 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-12-09 10:49:02,052 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-12-09 10:49:02,052 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-12-09 10:49:02,052 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-12-09 10:49:02,053 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-12-09 10:49:02,053 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-12-09 10:49:02,060 INFO L110 SettingsManager]: Loading preferences was successful [2018-12-09 10:49:02,060 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-12-09 10:49:02,061 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-12-09 10:49:02,061 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-12-09 10:49:02,061 INFO L133 SettingsManager]: * Use SBE=true [2018-12-09 10:49:02,061 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-12-09 10:49:02,061 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-12-09 10:49:02,061 INFO L133 SettingsManager]: * Use old map elimination=false [2018-12-09 10:49:02,061 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-12-09 10:49:02,061 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-12-09 10:49:02,061 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-12-09 10:49:02,062 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-12-09 10:49:02,062 INFO L133 SettingsManager]: * sizeof long=4 [2018-12-09 10:49:02,062 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-12-09 10:49:02,062 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-12-09 10:49:02,062 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-12-09 10:49:02,062 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-12-09 10:49:02,062 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-12-09 10:49:02,062 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-12-09 10:49:02,062 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-12-09 10:49:02,062 INFO L133 SettingsManager]: * sizeof long double=12 [2018-12-09 10:49:02,062 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-12-09 10:49:02,063 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-12-09 10:49:02,063 INFO L133 SettingsManager]: * Use constant arrays=true [2018-12-09 10:49:02,063 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-12-09 10:49:02,063 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-12-09 10:49:02,063 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-12-09 10:49:02,063 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-12-09 10:49:02,063 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-12-09 10:49:02,063 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-12-09 10:49:02,063 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-12-09 10:49:02,064 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-12-09 10:49:02,064 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5f6e99961ac853f3709ebf596b9583b8c3fd14e8 [2018-12-09 10:49:02,081 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-12-09 10:49:02,090 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-12-09 10:49:02,093 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-12-09 10:49:02,094 INFO L271 PluginConnector]: Initializing CDTParser... [2018-12-09 10:49:02,094 INFO L276 PluginConnector]: CDTParser initialized [2018-12-09 10:49:02,094 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product01_true-unreach-call_true-termination.cil.c [2018-12-09 10:49:02,133 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/data/0950d672f/5cb233f51a5e479a97f7fddb58065a02/FLAG3de5691c1 [2018-12-09 10:49:02,577 INFO L307 CDTParser]: Found 1 translation units. [2018-12-09 10:49:02,578 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/sv-benchmarks/c/product-lines/elevator_spec3_product01_true-unreach-call_true-termination.cil.c [2018-12-09 10:49:02,587 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/data/0950d672f/5cb233f51a5e479a97f7fddb58065a02/FLAG3de5691c1 [2018-12-09 10:49:02,596 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/data/0950d672f/5cb233f51a5e479a97f7fddb58065a02 [2018-12-09 10:49:02,597 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-12-09 10:49:02,598 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-12-09 10:49:02,599 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-12-09 10:49:02,599 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-12-09 10:49:02,601 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-12-09 10:49:02,602 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.12 10:49:02" (1/1) ... [2018-12-09 10:49:02,603 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@56aae676 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 10:49:02, skipping insertion in model container [2018-12-09 10:49:02,603 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.12 10:49:02" (1/1) ... [2018-12-09 10:49:02,608 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-12-09 10:49:02,638 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-12-09 10:49:02,924 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-12-09 10:49:02,932 INFO L191 MainTranslator]: Completed pre-run [2018-12-09 10:49:02,999 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-12-09 10:49:03,022 INFO L195 MainTranslator]: Completed translation [2018-12-09 10:49:03,022 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 10:49:03 WrapperNode [2018-12-09 10:49:03,022 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-12-09 10:49:03,023 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-12-09 10:49:03,023 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-12-09 10:49:03,023 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-12-09 10:49:03,029 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 10:49:03" (1/1) ... [2018-12-09 10:49:03,045 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 10:49:03" (1/1) ... [2018-12-09 10:49:03,149 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-12-09 10:49:03,150 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-12-09 10:49:03,150 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-12-09 10:49:03,150 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-12-09 10:49:03,156 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 10:49:03" (1/1) ... [2018-12-09 10:49:03,156 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 10:49:03" (1/1) ... [2018-12-09 10:49:03,172 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 10:49:03" (1/1) ... [2018-12-09 10:49:03,172 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 10:49:03" (1/1) ... [2018-12-09 10:49:03,211 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 10:49:03" (1/1) ... [2018-12-09 10:49:03,252 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 10:49:03" (1/1) ... [2018-12-09 10:49:03,268 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 10:49:03" (1/1) ... [2018-12-09 10:49:03,291 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-12-09 10:49:03,291 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-12-09 10:49:03,291 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-12-09 10:49:03,291 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-12-09 10:49:03,292 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 10:49:03" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:49:03,335 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-12-09 10:49:03,336 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-12-09 10:49:03,336 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-12-09 10:49:03,336 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-12-09 10:49:07,875 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-12-09 10:49:07,875 INFO L280 CfgBuilder]: Removed 1107 assue(true) statements. [2018-12-09 10:49:07,876 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.12 10:49:07 BoogieIcfgContainer [2018-12-09 10:49:07,876 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-12-09 10:49:07,876 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-12-09 10:49:07,876 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-12-09 10:49:07,879 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-12-09 10:49:07,880 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-09 10:49:07,880 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 09.12 10:49:02" (1/3) ... [2018-12-09 10:49:07,881 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6d0d2c1a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.12 10:49:07, skipping insertion in model container [2018-12-09 10:49:07,881 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-09 10:49:07,881 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 10:49:03" (2/3) ... [2018-12-09 10:49:07,881 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6d0d2c1a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.12 10:49:07, skipping insertion in model container [2018-12-09 10:49:07,881 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-09 10:49:07,881 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.12 10:49:07" (3/3) ... [2018-12-09 10:49:07,883 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product01_true-unreach-call_true-termination.cil.c [2018-12-09 10:49:07,913 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-12-09 10:49:07,913 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-12-09 10:49:07,913 INFO L375 BuchiCegarLoop]: Hoare is false [2018-12-09 10:49:07,914 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-12-09 10:49:07,914 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-12-09 10:49:07,914 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-12-09 10:49:07,914 INFO L379 BuchiCegarLoop]: Difference is false [2018-12-09 10:49:07,914 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-12-09 10:49:07,914 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-12-09 10:49:07,963 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5583 states. [2018-12-09 10:49:08,035 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1134 [2018-12-09 10:49:08,035 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:08,035 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:08,046 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:08,046 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:08,046 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-12-09 10:49:08,046 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5583 states. [2018-12-09 10:49:08,075 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1134 [2018-12-09 10:49:08,075 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:08,075 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:08,077 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:08,078 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:08,082 INFO L794 eck$LassoCheckResult]: Stem: 2756#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 4186#L-1true havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 5442#L1856true havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 4697#L1864true main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 3512#L385true assume 0 != main_~tmp~8; 3860#L358true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 940#L692true havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 3778#L444true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3549#L469true bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4017#L970true assume 0 == initPersonOnFloor_~floor; 4162#L971true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2659#L1078-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2217#L762true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 27#L774-2true havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 455#L2092true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3631#L2144true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 60#L1305true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 1090#L1306true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4488#L2109true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4773#L2130true __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 1011#L1310true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 3952#L1411true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 799#L699true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2832#L726true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 675#L2705true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1138#L2717true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3321#L2854true assume !(0 != timeShift_~tmp___9~3); 3136#L2945true assume !(1 == ~doorState~0); 3138#L2945-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3838#L2296true assume !(1 == stopRequestedInDirection_~dir); 4215#L2465true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 603#L2618true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1435#L2953true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3673#L2672true assume !(1 == ~currentHeading~0); 1898#L2682true assume !(0 == ~currentFloorID~0); 1881#L2682-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1339#L2688-5true havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2511#L1436true assume !(-1 == ~expectedDirection~0); 3097#L1448true assume !(1 == ~expectedDirection~0); 1857#L1449true havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 454#L2092-1true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3602#L2144-3true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 64#L1305-1true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1333#L1367-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4452#L2109-16true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4739#L2130-16true __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1269#L1371-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 3956#L1411-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4493#L699-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2744#L726-21true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 680#L2705-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1142#L2717-1true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3324#L2854-1true assume !(0 != timeShift_~tmp___9~3); 3122#L2945-3true assume !(1 == ~doorState~0); 3130#L2945-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3841#L2296-2true assume !(1 == stopRequestedInDirection_~dir); 4219#L2465-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 578#L2618-2true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1443#L2953-1true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3655#L2672-3true assume !(1 == ~currentHeading~0); 1869#L2682-9true assume !(0 == ~currentFloorID~0); 1872#L2682-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1337#L2688-11true havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2512#L1436-1true assume !(-1 == ~expectedDirection~0); 3100#L1448-1true assume !(1 == ~expectedDirection~0); 1863#L1449-1true havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 456#L2092-2true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3609#L2144-6true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 65#L1305-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1334#L1367-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4426#L2109-27true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4711#L2130-27true __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1275#L1371-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 3958#L1411-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4444#L699-42true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2585#L726-42true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 678#L2705-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1140#L2717-2true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3308#L2854-2true assume !(0 != timeShift_~tmp___9~3); 3127#L2945-6true assume !(1 == ~doorState~0); 3108#L2945-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 5446#L2296-4true assume !(1 == stopRequestedInDirection_~dir); 4195#L2465-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 581#L2618-4true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1440#L2953-2true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3662#L2672-6true assume !(1 == ~currentHeading~0); 1821#L2682-18true assume !(0 == ~currentFloorID~0); 1825#L2682-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1474#L2688-17true havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2513#L1436-2true assume !(-1 == ~expectedDirection~0); 3104#L1448-2true assume !(1 == ~expectedDirection~0); 1866#L1449-2true havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 3783#L444-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3548#L469-1true bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3998#L970-1true assume 0 == initPersonOnFloor_~floor; 4159#L971-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2838#L1078-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2207#L762-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 40#L774-5true havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 443#L2092-3true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3584#L2144-9true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 69#L1305-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 1067#L1306-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4417#L2109-33true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2921#L2130-33true __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 1001#L1310-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 3960#L1411-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4638#L699-63true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2539#L726-63true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 658#L2705-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1144#L2717-3true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3306#L2854-3true assume !(0 != timeShift_~tmp___9~3); 3114#L2945-9true assume !(1 == ~doorState~0); 3116#L2945-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 5448#L2296-6true assume !(1 == stopRequestedInDirection_~dir); 4197#L2465-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 422#L2618-6true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1446#L2953-3true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3637#L2672-9true assume !(1 == ~currentHeading~0); 1807#L2682-27true assume !(0 == ~currentFloorID~0); 1983#L2682-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1438#L2688-23true havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2509#L1436-3true assume !(-1 == ~expectedDirection~0); 3106#L1448-3true assume !(1 == ~expectedDirection~0); 1870#L1449-3true cleanup_~i~0 := 0; 4868#L188-2true [2018-12-09 10:49:08,083 INFO L796 eck$LassoCheckResult]: Loop: 4868#L188-2true assume !false; 5034#L189true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 4800#L192true assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2603#L1963true cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 2714#L196true assume 1 != cleanup_~tmp___0~0; 2712#L196-1true havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4553#L699-84true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2640#L726-84true anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 4260#L2200true assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 530#L2264true isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 986#L2277true cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 3344#L208true assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 445#L2092-4true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3569#L2144-12true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 70#L1305-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 1071#L1306-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4644#L2109-44true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2894#L2130-44true __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 1005#L1310-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 3962#L1411-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4533#L699-89true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2634#L726-89true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 662#L2705-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1129#L2717-4true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3311#L2854-4true assume !(0 != timeShift_~tmp___9~3); 3118#L2945-12true assume 1 == ~doorState~0;~doorState~0 := 0; 3094#L2945-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 5454#L2296-8true assume !(1 == stopRequestedInDirection_~dir); 4170#L2465-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 425#L2618-8true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1451#L2953-4true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3617#L2672-12true assume !(1 == ~currentHeading~0); 1975#L2682-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1958#L2682-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1424#L2688-29true havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2510#L1436-4true assume !(-1 == ~expectedDirection~0); 3086#L1448-4true assume !(1 == ~expectedDirection~0); 1874#L1449-4true cleanup_~i~0 := 1 + cleanup_~i~0; 4868#L188-2true [2018-12-09 10:49:08,087 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:08,087 INFO L82 PathProgramCache]: Analyzing trace with hash -1459300459, now seen corresponding path program 1 times [2018-12-09 10:49:08,088 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:08,088 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:08,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:08,118 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:08,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:08,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:08,274 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:08,275 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:08,276 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:08,278 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:08,278 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:08,278 INFO L82 PathProgramCache]: Analyzing trace with hash -872606770, now seen corresponding path program 1 times [2018-12-09 10:49:08,278 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:08,278 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:08,279 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:08,279 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:08,279 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:08,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:08,348 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:08,348 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:08,348 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-12-09 10:49:08,349 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:08,358 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-12-09 10:49:08,359 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-12-09 10:49:08,360 INFO L87 Difference]: Start difference. First operand 5583 states. Second operand 6 states. [2018-12-09 10:49:11,159 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:11,159 INFO L93 Difference]: Finished difference Result 13995 states and 26350 transitions. [2018-12-09 10:49:11,160 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-12-09 10:49:11,161 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13995 states and 26350 transitions. [2018-12-09 10:49:11,214 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3235 [2018-12-09 10:49:11,263 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13995 states to 13925 states and 26269 transitions. [2018-12-09 10:49:11,264 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13925 [2018-12-09 10:49:11,273 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13925 [2018-12-09 10:49:11,274 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13925 states and 26269 transitions. [2018-12-09 10:49:11,295 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:11,296 INFO L705 BuchiCegarLoop]: Abstraction has 13925 states and 26269 transitions. [2018-12-09 10:49:11,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13925 states and 26269 transitions. [2018-12-09 10:49:11,433 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13925 to 9243. [2018-12-09 10:49:11,434 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9243 states. [2018-12-09 10:49:11,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9243 states to 9243 states and 17452 transitions. [2018-12-09 10:49:11,446 INFO L728 BuchiCegarLoop]: Abstraction has 9243 states and 17452 transitions. [2018-12-09 10:49:11,446 INFO L608 BuchiCegarLoop]: Abstraction has 9243 states and 17452 transitions. [2018-12-09 10:49:11,446 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-12-09 10:49:11,446 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9243 states and 17452 transitions. [2018-12-09 10:49:11,464 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2073 [2018-12-09 10:49:11,464 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:11,464 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:11,466 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:11,466 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:11,467 INFO L794 eck$LassoCheckResult]: Stem: 23052#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 23053#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 24649#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 24927#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 23737#L385 assume 0 != main_~tmp~8; 23738#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 21079#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 21080#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 22695#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 23759#L970 assume 0 == initPersonOnFloor_~floor; 24424#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 19895#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 22477#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 19681#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 19682#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20462#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 19759#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 19760#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 21190#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 24553#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 21146#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 19814#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 20932#L699 assume !(0 == isFloorCalling_~floorID); 20933#L703 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 23125#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 20733#L2705 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 19708#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21193#L2854 assume !(0 != timeShift_~tmp___9~3); 23412#L2945 assume !(1 == ~doorState~0); 23413#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 23415#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 22089#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 22090#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 19944#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 20639#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 21668#L2672 assume !(1 == ~currentHeading~0); 22153#L2682 assume !(0 == ~currentFloorID~0); 22137#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 21498#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 21499#L1436 assume !(-1 == ~expectedDirection~0); 22661#L1448 assume !(1 == ~expectedDirection~0); 21959#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 20460#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20461#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 19771#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 19772#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 21491#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 19978#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 19980#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 21025#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 23057#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 24367#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 23040#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 20742#L2705-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 19699#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21195#L2854-1 assume !(0 != timeShift_~tmp___9~3); 23401#L2945-3 assume !(1 == ~doorState~0); 23402#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 23407#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 24178#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 28758#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 28757#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 23829#L2672-3 assume !(1 == ~currentHeading~0); 23830#L2682-9 assume !(0 == ~currentFloorID~0); 22126#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 21429#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 21496#L1436-1 assume !(-1 == ~expectedDirection~0); 22662#L1448-1 assume !(1 == ~expectedDirection~0); 21968#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 20463#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20464#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 19774#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 19775#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 21493#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 19982#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 19984#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 21029#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 23067#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 24369#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 22784#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 20738#L2705-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 19710#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21194#L2854-2 assume !(0 != timeShift_~tmp___9~3); 23406#L2945-6 assume !(1 == ~doorState~0); 23389#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 23390#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 25432#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 20532#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 20610#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 21675#L2672-6 assume !(1 == ~currentHeading~0); 23833#L2682-18 assume !(0 == ~currentFloorID~0); 22072#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 21433#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 21730#L1436-2 assume !(-1 == ~expectedDirection~0); 22664#L1448-2 assume !(1 == ~expectedDirection~0); 21925#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 22122#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 22700#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 23758#L970-1 assume 0 == initPersonOnFloor_~floor; 24402#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 19870#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 22458#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 19695#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 19711#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20454#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 19786#L1305-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 19787#L1306-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 20882#L1316-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 20883#L2109-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 23231#L2130-34 __utac_acc__Specification3_spec__1_#t~ret23 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret23;havoc __utac_acc__Specification3_spec__1_#t~ret23; 23232#L1321-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 23027#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 24371#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 22710#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 20706#L2705-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 19724#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21196#L2854-3 assume !(0 != timeShift_~tmp___9~3); 23393#L2945-9 assume !(1 == ~doorState~0); 23394#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 23396#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 25433#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 28629#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 28628#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 23819#L2672-9 assume !(1 == ~currentHeading~0); 23820#L2682-27 assume !(0 == ~currentFloorID~0); 22054#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 21422#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 21672#L1436-3 assume !(-1 == ~expectedDirection~0); 22656#L1448-3 assume !(1 == ~expectedDirection~0); 21935#L1449-3 cleanup_~i~0 := 0; 22127#L188-2 [2018-12-09 10:49:11,467 INFO L796 eck$LassoCheckResult]: Loop: 22127#L188-2 assume !false; 25083#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 25015#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 22815#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 22816#L196 assume 1 != cleanup_~tmp___0~0; 22992#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 22993#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 22870#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 22871#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 20536#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 20537#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 21119#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 20455#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20456#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 19789#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 19790#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 28573#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 28572#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 28571#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 24430#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 23038#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 24373#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 22859#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 20713#L2705-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 19668#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21192#L2854-4 assume !(0 != timeShift_~tmp___9~3); 23398#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 23379#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 23380#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 25435#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 28580#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 28578#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 28579#L2672-12 assume !(1 == ~currentHeading~0); 28825#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 22203#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 21426#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 21646#L1436-4 assume !(-1 == ~expectedDirection~0); 22658#L1448-4 assume !(1 == ~expectedDirection~0); 21951#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 22127#L188-2 [2018-12-09 10:49:11,467 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:11,467 INFO L82 PathProgramCache]: Analyzing trace with hash 1518867470, now seen corresponding path program 1 times [2018-12-09 10:49:11,467 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:11,468 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:11,468 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:11,468 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:11,468 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:11,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:11,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:11,529 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:11,529 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:11,530 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:11,530 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:11,530 INFO L82 PathProgramCache]: Analyzing trace with hash 2142700463, now seen corresponding path program 1 times [2018-12-09 10:49:11,530 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:11,530 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:11,531 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:11,531 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:11,531 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:11,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:11,547 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:11,547 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:11,547 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:11,547 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:11,547 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-12-09 10:49:11,548 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-12-09 10:49:11,548 INFO L87 Difference]: Start difference. First operand 9243 states and 17452 transitions. cyclomatic complexity: 8210 Second operand 4 states. [2018-12-09 10:49:11,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:11,735 INFO L93 Difference]: Finished difference Result 16309 states and 30947 transitions. [2018-12-09 10:49:11,736 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-12-09 10:49:11,736 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16309 states and 30947 transitions. [2018-12-09 10:49:11,792 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3721 [2018-12-09 10:49:11,839 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16309 states to 16309 states and 30947 transitions. [2018-12-09 10:49:11,839 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16309 [2018-12-09 10:49:11,856 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16309 [2018-12-09 10:49:11,857 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16309 states and 30947 transitions. [2018-12-09 10:49:11,870 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:11,870 INFO L705 BuchiCegarLoop]: Abstraction has 16309 states and 30947 transitions. [2018-12-09 10:49:11,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16309 states and 30947 transitions. [2018-12-09 10:49:11,986 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16309 to 9261. [2018-12-09 10:49:11,986 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9261 states. [2018-12-09 10:49:11,999 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9261 states to 9261 states and 17470 transitions. [2018-12-09 10:49:12,000 INFO L728 BuchiCegarLoop]: Abstraction has 9261 states and 17470 transitions. [2018-12-09 10:49:12,000 INFO L608 BuchiCegarLoop]: Abstraction has 9261 states and 17470 transitions. [2018-12-09 10:49:12,000 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-12-09 10:49:12,000 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9261 states and 17470 transitions. [2018-12-09 10:49:12,023 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2077 [2018-12-09 10:49:12,023 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:12,023 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:12,074 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:12,074 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:12,074 INFO L794 eck$LassoCheckResult]: Stem: 48574#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 48575#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 50118#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 50344#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 49255#L385 assume 0 != main_~tmp~8; 49256#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 46640#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 46641#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 48243#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 49277#L970 assume 0 == initPersonOnFloor_~floor; 49906#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 45464#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 48028#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 45254#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 45255#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 46029#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 45328#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 45329#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46745#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 50025#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 46705#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 45383#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 46494#L699 assume !(0 == isFloorCalling_~floorID); 46495#L703 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 48644#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 46296#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46297#L2109-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 49633#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 45273#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 45275#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 50831#L2854 assume !(0 != timeShift_~tmp___9~3); 48932#L2945 assume !(1 == ~doorState~0); 48933#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 48935#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 47640#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 47641#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 45513#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 46206#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 47223#L2672 assume !(1 == ~currentHeading~0); 47706#L2682 assume !(0 == ~currentFloorID~0); 47690#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 47673#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 51295#L1436 assume !(-1 == ~expectedDirection~0); 51285#L1448 assume !(1 == ~expectedDirection~0); 51284#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 51283#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 51282#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 51280#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 51278#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 51277#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 51276#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 51270#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 51253#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 51250#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 51248#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 51244#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 51243#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 51229#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 51225#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 51220#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 51218#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 51210#L2854-1 assume !(0 != timeShift_~tmp___9~3); 51203#L2945-3 assume !(1 == ~doorState~0); 51197#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 51179#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 51142#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 51123#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 51109#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 51102#L2672-3 assume !(1 == ~currentHeading~0); 50976#L2682-9 assume !(0 == ~currentFloorID~0); 47678#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 47615#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 51622#L1436-1 assume !(-1 == ~expectedDirection~0); 51619#L1448-1 assume !(1 == ~expectedDirection~0); 51597#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 51591#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 51590#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 51575#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 51572#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 51570#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 51553#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 51543#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 51535#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 50971#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 50969#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 50965#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 50963#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 50955#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 50951#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 50946#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 50944#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 50942#L2854-2 assume !(0 != timeShift_~tmp___9~3); 50941#L2945-6 assume !(1 == ~doorState~0); 50923#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 50916#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 50878#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 50877#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 50875#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 50876#L2672-6 assume !(1 == ~currentHeading~0); 50973#L2682-18 assume !(0 == ~currentFloorID~0); 47621#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 47581#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 48213#L1436-2 assume !(-1 == ~expectedDirection~0); 48214#L1448-2 assume !(1 == ~expectedDirection~0); 47474#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 47674#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 48246#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 49276#L970-1 assume 0 == initPersonOnFloor_~floor; 49885#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 45439#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 48009#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 45260#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 45279#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 46021#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 45355#L1305-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 45356#L1306-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 46441#L1316-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46442#L2109-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 48750#L2130-34 __utac_acc__Specification3_spec__1_#t~ret23 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret23;havoc __utac_acc__Specification3_spec__1_#t~ret23; 48751#L1321-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 48549#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 49854#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 48256#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 46267#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46268#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 48704#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 45291#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 45293#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 53139#L2854-3 assume !(0 != timeShift_~tmp___9~3); 48913#L2945-9 assume !(1 == ~doorState~0); 48914#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 48915#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 50826#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 51307#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 51238#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 51235#L2672-9 assume !(1 == ~currentHeading~0); 51233#L2682-27 assume !(0 == ~currentFloorID~0); 47603#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 47771#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 51697#L1436-3 assume !(-1 == ~expectedDirection~0); 51693#L1448-3 assume !(1 == ~expectedDirection~0); 51690#L1449-3 cleanup_~i~0 := 0; 51688#L188-2 [2018-12-09 10:49:12,075 INFO L796 eck$LassoCheckResult]: Loop: 51688#L188-2 assume !false; 51651#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 51648#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 51639#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 51637#L196 assume 1 != cleanup_~tmp___0~0; 51636#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 51605#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 51593#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 51580#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 51574#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 51569#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 51547#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 51541#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 51532#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 51529#L1305-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 51523#L1306-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 51522#L1316-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 51516#L2109-45 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 51503#L2130-45 __utac_acc__Specification3_spec__1_#t~ret23 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret23;havoc __utac_acc__Specification3_spec__1_#t~ret23; 51496#L1321-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 51219#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 51217#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 51143#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 51110#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 51107#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 51100#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 51098#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 51092#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 51087#L2854-4 assume !(0 != timeShift_~tmp___9~3); 51083#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 51071#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 51063#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 51030#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 51023#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 51022#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 49324#L2672-12 assume !(1 == ~currentHeading~0); 49325#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 47756#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 47746#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 51716#L1436-4 assume !(-1 == ~expectedDirection~0); 51704#L1448-4 assume !(1 == ~expectedDirection~0); 51689#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 51688#L188-2 [2018-12-09 10:49:12,077 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:12,077 INFO L82 PathProgramCache]: Analyzing trace with hash 494557243, now seen corresponding path program 1 times [2018-12-09 10:49:12,077 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:12,077 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:12,078 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:12,078 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:12,078 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:12,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:12,133 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:12,133 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:12,133 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:12,134 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:12,134 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:12,134 INFO L82 PathProgramCache]: Analyzing trace with hash -1586794052, now seen corresponding path program 1 times [2018-12-09 10:49:12,134 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:12,134 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:12,135 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:12,135 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:12,135 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:12,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:12,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:12,150 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:12,150 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-09 10:49:12,150 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:12,150 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-09 10:49:12,151 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-09 10:49:12,151 INFO L87 Difference]: Start difference. First operand 9261 states and 17470 transitions. cyclomatic complexity: 8210 Second operand 3 states. [2018-12-09 10:49:12,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:12,536 INFO L93 Difference]: Finished difference Result 18012 states and 33918 transitions. [2018-12-09 10:49:12,536 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-09 10:49:12,537 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18012 states and 33918 transitions. [2018-12-09 10:49:12,576 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4058 [2018-12-09 10:49:12,612 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18012 states to 18012 states and 33918 transitions. [2018-12-09 10:49:12,612 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18012 [2018-12-09 10:49:12,621 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18012 [2018-12-09 10:49:12,622 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18012 states and 33918 transitions. [2018-12-09 10:49:12,631 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:12,631 INFO L705 BuchiCegarLoop]: Abstraction has 18012 states and 33918 transitions. [2018-12-09 10:49:12,643 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18012 states and 33918 transitions. [2018-12-09 10:49:12,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18012 to 9219. [2018-12-09 10:49:12,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9219 states. [2018-12-09 10:49:12,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9219 states to 9219 states and 17358 transitions. [2018-12-09 10:49:12,738 INFO L728 BuchiCegarLoop]: Abstraction has 9219 states and 17358 transitions. [2018-12-09 10:49:12,738 INFO L608 BuchiCegarLoop]: Abstraction has 9219 states and 17358 transitions. [2018-12-09 10:49:12,738 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-12-09 10:49:12,738 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9219 states and 17358 transitions. [2018-12-09 10:49:12,752 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2068 [2018-12-09 10:49:12,752 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:12,752 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:12,754 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:12,754 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:12,754 INFO L794 eck$LassoCheckResult]: Stem: 75881#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 75882#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 77423#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 77682#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 76568#L385 assume 0 != main_~tmp~8; 76569#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 73936#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 73937#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 75548#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 76590#L970 assume 0 == initPersonOnFloor_~floor; 77212#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 72746#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 75333#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 72532#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 72533#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 73316#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 72610#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 72611#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 74044#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 77329#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 74000#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 72665#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 73789#L699 assume !(0 == isFloorCalling_~floorID); 73790#L703 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 75954#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 73587#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 73588#L2109-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 76940#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 72554#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 72556#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 78170#L2854 assume !(0 != timeShift_~tmp___9~3); 76245#L2945 assume !(1 == ~doorState~0); 76246#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 76248#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 74944#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 74945#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 72795#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 73497#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 74523#L2672 assume !(1 == ~currentHeading~0); 75010#L2682 assume !(0 == ~currentFloorID~0); 74994#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 74976#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 78362#L1436 assume !(-1 == ~expectedDirection~0); 78358#L1448 assume !(1 == ~expectedDirection~0); 78357#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 78355#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 78343#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 78311#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 78312#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 78356#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 78344#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 78321#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 78305#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 78292#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 78290#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 78285#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 78284#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 77600#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 76880#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 72544#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 72546#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 79511#L2854-1 assume !(0 != timeShift_~tmp___9~3); 76235#L2945-3 assume !(1 == ~doorState~0); 76236#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 76240#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 76980#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 73420#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 73464#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 74534#L2672-3 assume !(1 == ~currentHeading~0); 78268#L2682-9 assume !(0 == ~currentFloorID~0); 74982#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 74284#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 74350#L1436-1 assume !(-1 == ~expectedDirection~0); 75519#L1448-1 assume !(1 == ~expectedDirection~0); 74821#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 73317#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 73318#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 72625#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 72626#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 74347#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 72833#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 72835#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 73884#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 75895#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 77159#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 75631#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 73592#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 73594#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 78432#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 78427#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 78426#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 78424#L2854-2 assume !(0 != timeShift_~tmp___9~3); 78423#L2945-6 assume !(1 == ~doorState~0); 78404#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 78395#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 78376#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 78375#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 78370#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 78369#L2672-6 assume !(1 == ~currentHeading~0); 78172#L2682-18 assume !(0 == ~currentFloorID~0); 74928#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 74888#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 79565#L1436-2 assume !(-1 == ~expectedDirection~0); 79562#L1448-2 assume !(1 == ~expectedDirection~0); 79561#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 79559#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 79554#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 79553#L970-1 assume 0 == initPersonOnFloor_~floor; 79525#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 75958#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 75312#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 72538#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 73306#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 73307#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 72634#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 72636#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 74570#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 72813#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 72815#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 73861#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 75854#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 77162#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 75563#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 73559#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 73561#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 79393#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 79392#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 79391#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 79390#L2854-3 assume !(0 != timeShift_~tmp___9~3); 79389#L2945-9 assume !(1 == ~doorState~0); 79388#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 79382#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 79317#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 79308#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 79306#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 79305#L2672-9 assume !(1 == ~currentHeading~0); 79304#L2682-27 assume !(0 == ~currentFloorID~0); 74910#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 74520#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 74521#L1436-3 assume !(-1 == ~expectedDirection~0); 80286#L1448-3 assume !(1 == ~expectedDirection~0); 74983#L1449-3 cleanup_~i~0 := 0; 74984#L188-2 [2018-12-09 10:49:12,754 INFO L796 eck$LassoCheckResult]: Loop: 74984#L188-2 assume !false; 77826#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 77761#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 75659#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 75660#L196 assume 1 != cleanup_~tmp___0~0; 75822#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 75823#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 75709#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 75710#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 73392#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 73393#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 73974#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 79001#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 78655#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 78644#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 74571#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 74573#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 72816#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 72818#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 73865#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 75864#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 77163#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 75700#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 73564#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 73566#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 78597#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 78596#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 78595#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 78585#L2854-4 assume !(0 != timeShift_~tmp___9~3); 78578#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 78575#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 78574#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 78532#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 78525#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 78524#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 76643#L2672-12 assume !(1 == ~currentHeading~0); 76644#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 75060#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 74281#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 75514#L1436-4 assume !(-1 == ~expectedDirection~0); 75515#L1448-4 assume !(1 == ~expectedDirection~0); 74802#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 74984#L188-2 [2018-12-09 10:49:12,754 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:12,754 INFO L82 PathProgramCache]: Analyzing trace with hash -1564360061, now seen corresponding path program 1 times [2018-12-09 10:49:12,755 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:12,755 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:12,757 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:12,757 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:12,758 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:12,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:12,796 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:12,796 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:12,796 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:12,796 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:12,797 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:12,797 INFO L82 PathProgramCache]: Analyzing trace with hash 649255940, now seen corresponding path program 1 times [2018-12-09 10:49:12,797 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:12,797 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:12,797 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:12,797 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:12,797 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:12,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:12,832 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:12,832 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:12,833 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-09 10:49:12,833 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:12,833 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-12-09 10:49:12,833 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-12-09 10:49:12,833 INFO L87 Difference]: Start difference. First operand 9219 states and 17358 transitions. cyclomatic complexity: 8140 Second operand 7 states. [2018-12-09 10:49:14,854 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:14,855 INFO L93 Difference]: Finished difference Result 56694 states and 107254 transitions. [2018-12-09 10:49:14,855 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2018-12-09 10:49:14,855 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 56694 states and 107254 transitions. [2018-12-09 10:49:14,998 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20476 [2018-12-09 10:49:15,124 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 56694 states to 56694 states and 107254 transitions. [2018-12-09 10:49:15,124 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 56694 [2018-12-09 10:49:15,156 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 56694 [2018-12-09 10:49:15,156 INFO L73 IsDeterministic]: Start isDeterministic. Operand 56694 states and 107254 transitions. [2018-12-09 10:49:15,186 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:15,186 INFO L705 BuchiCegarLoop]: Abstraction has 56694 states and 107254 transitions. [2018-12-09 10:49:15,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56694 states and 107254 transitions. [2018-12-09 10:49:15,420 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56694 to 18399. [2018-12-09 10:49:15,420 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 18399 states. [2018-12-09 10:49:15,438 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18399 states to 18399 states and 34633 transitions. [2018-12-09 10:49:15,438 INFO L728 BuchiCegarLoop]: Abstraction has 18399 states and 34633 transitions. [2018-12-09 10:49:15,438 INFO L608 BuchiCegarLoop]: Abstraction has 18399 states and 34633 transitions. [2018-12-09 10:49:15,438 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-12-09 10:49:15,438 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18399 states and 34633 transitions. [2018-12-09 10:49:15,468 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4146 [2018-12-09 10:49:15,468 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:15,468 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:15,470 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:15,470 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:15,471 INFO L794 eck$LassoCheckResult]: Stem: 142027#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 142028#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 143854#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 144229#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 142838#L385 assume 0 != main_~tmp~8; 142839#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 139941#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 139942#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 141647#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 142867#L970 assume 0 == initPersonOnFloor_~floor; 143605#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 138712#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 141414#L762 assume !(0 == callOnFloor_~floorID); 141285#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 138565#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 145351#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 145350#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 145349#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 145348#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 145342#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 145341#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 140009#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 138631#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 139779#L699 assume !(0 == isFloorCalling_~floorID); 139780#L703 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 142126#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 139576#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 139577#L2109-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 143291#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 138519#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 138521#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 144799#L2854 assume !(0 != timeShift_~tmp___9~3); 142446#L2945 assume !(1 == ~doorState~0); 142447#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 145282#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 141005#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 141006#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 145271#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 145269#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 145270#L2672 assume !(1 == ~currentHeading~0); 145442#L2682 assume !(0 == ~currentFloorID~0); 145196#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 145195#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 145193#L1436 assume !(-1 == ~expectedDirection~0); 145189#L1448 assume !(1 == ~expectedDirection~0); 145157#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 145156#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 145155#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 145152#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 145150#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 145147#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 145145#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 145128#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 145120#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 145115#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 145113#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 145109#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 145108#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 145106#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 145102#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 145101#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 145100#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 145099#L2854-1 assume !(0 != timeShift_~tmp___9~3); 145097#L2945-3 assume !(1 == ~doorState~0); 145094#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 145092#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 145057#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 145040#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 145038#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 145039#L2672-3 assume !(1 == ~currentHeading~0); 145447#L2682-9 assume !(0 == ~currentFloorID~0); 141048#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 145836#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 145829#L1436-1 assume !(-1 == ~expectedDirection~0); 145806#L1448-1 assume !(1 == ~expectedDirection~0); 145759#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 145752#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 145750#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 145742#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 145733#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 145728#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 145724#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 145714#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 145689#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 145556#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 144951#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 141739#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 141740#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 144043#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 142221#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 138524#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 138526#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 145529#L2854-2 assume !(0 != timeShift_~tmp___9~3); 142440#L2945-6 assume !(1 == ~doorState~0); 142423#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 142424#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 144782#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 144877#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 144875#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 144876#L2672-6 assume !(1 == ~currentHeading~0); 145449#L2682-18 assume !(0 == ~currentFloorID~0); 140986#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 145837#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 145833#L1436-2 assume !(-1 == ~expectedDirection~0); 145826#L1448-2 assume !(1 == ~expectedDirection~0); 145825#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 145823#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 145818#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 145814#L970-1 assume 0 == initPersonOnFloor_~floor; 145781#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 145774#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 145772#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 145773#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 149293#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 149292#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 149290#L1305-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 149289#L1306-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 140059#L2109-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 142232#L2130-33 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 139999#L1310-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 138598#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 144177#L699-63 assume !(0 == isFloorCalling_~floorID); 144178#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 145540#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 145541#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 145536#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 145531#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 145527#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 145524#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 145522#L2854-3 assume !(0 != timeShift_~tmp___9~3); 142427#L2945-9 assume !(1 == ~doorState~0); 142428#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 142430#L2296-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 144785#L1273-15 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 144588#L2300-6 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 138755#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 139252#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 140573#L2672-9 assume !(1 == ~currentHeading~0); 140967#L2682-27 assume !(0 == ~currentFloorID~0); 140968#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 151087#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 151085#L1436-3 assume !(-1 == ~expectedDirection~0); 151082#L1448-3 assume !(1 == ~expectedDirection~0); 151080#L1449-3 cleanup_~i~0 := 0; 151078#L188-2 [2018-12-09 10:49:15,471 INFO L796 eck$LassoCheckResult]: Loop: 151078#L188-2 assume !false; 151077#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 151076#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 151075#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 151074#L196 assume 1 != cleanup_~tmp___0~0; 151069#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 151067#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 151068#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 151031#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 151026#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 151025#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 151024#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 151023#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 151022#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 151019#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 151015#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 151011#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 150997#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 150987#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 150979#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 150976#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 144132#L699-89 assume !(0 == isFloorCalling_~floorID); 144133#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 155959#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 155958#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 155956#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 155947#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 155946#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 155945#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 155943#L2854-4 assume !(0 != timeShift_~tmp___9~3); 155942#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 155925#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 155920#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 155906#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 155903#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 155901#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 155902#L2672-12 assume !(1 == ~currentHeading~0); 150772#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 141160#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 155841#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 152866#L1436-4 assume !(-1 == ~expectedDirection~0); 152863#L1448-4 assume !(1 == ~expectedDirection~0); 151079#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 151078#L188-2 [2018-12-09 10:49:15,474 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:15,474 INFO L82 PathProgramCache]: Analyzing trace with hash -467652938, now seen corresponding path program 1 times [2018-12-09 10:49:15,474 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:15,476 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:15,476 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:15,477 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:15,477 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:15,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:15,516 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:15,516 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:15,516 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:15,517 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:15,517 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:15,517 INFO L82 PathProgramCache]: Analyzing trace with hash -280811435, now seen corresponding path program 1 times [2018-12-09 10:49:15,517 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:15,517 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:15,518 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:15,518 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:15,518 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:15,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:15,579 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:15,579 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:15,579 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-09 10:49:15,579 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:15,579 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-12-09 10:49:15,580 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-12-09 10:49:15,580 INFO L87 Difference]: Start difference. First operand 18399 states and 34633 transitions. cyclomatic complexity: 16235 Second operand 7 states. [2018-12-09 10:49:21,363 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:21,363 INFO L93 Difference]: Finished difference Result 39195 states and 73151 transitions. [2018-12-09 10:49:21,364 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-12-09 10:49:21,364 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39195 states and 73151 transitions. [2018-12-09 10:49:21,451 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9426 [2018-12-09 10:49:21,521 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39195 states to 39195 states and 73151 transitions. [2018-12-09 10:49:21,521 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 39195 [2018-12-09 10:49:21,541 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 39195 [2018-12-09 10:49:21,541 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39195 states and 73151 transitions. [2018-12-09 10:49:21,565 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:21,565 INFO L705 BuchiCegarLoop]: Abstraction has 39195 states and 73151 transitions. [2018-12-09 10:49:21,581 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39195 states and 73151 transitions. [2018-12-09 10:49:21,791 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39195 to 25047. [2018-12-09 10:49:21,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 25047 states. [2018-12-09 10:49:21,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25047 states to 25047 states and 46973 transitions. [2018-12-09 10:49:21,820 INFO L728 BuchiCegarLoop]: Abstraction has 25047 states and 46973 transitions. [2018-12-09 10:49:21,820 INFO L608 BuchiCegarLoop]: Abstraction has 25047 states and 46973 transitions. [2018-12-09 10:49:21,820 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-12-09 10:49:21,820 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25047 states and 46973 transitions. [2018-12-09 10:49:21,865 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5918 [2018-12-09 10:49:21,865 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:21,865 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:21,867 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:21,867 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:21,868 INFO L794 eck$LassoCheckResult]: Stem: 199633#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 199634#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 201505#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 201926#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 200444#L385 assume 0 != main_~tmp~8; 200445#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 197559#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 197560#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 199276#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 200471#L970 assume 0 == initPersonOnFloor_~floor; 201247#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 196338#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 199038#L762 assume !(0 == callOnFloor_~floorID); 198909#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 196120#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 196121#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 196913#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 196202#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 196203#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 197684#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 201390#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 197627#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 196257#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 197404#L699 assume !(0 == isFloorCalling_~floorID); 197405#L703 assume !(1 == isFloorCalling_~floorID); 201450#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 199730#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 197203#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 197204#L2109-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 200900#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 196147#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 196149#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 202495#L2854 assume !(0 != timeShift_~tmp___9~3); 200049#L2945 assume !(1 == ~doorState~0); 200050#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 200052#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 200941#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 202308#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 196387#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 197106#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 198180#L2672 assume !(1 == ~currentHeading~0); 198703#L2682 assume !(0 == ~currentFloorID~0); 198704#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 202568#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 202566#L1436 assume !(-1 == ~expectedDirection~0); 202562#L1448 assume !(1 == ~expectedDirection~0); 202561#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 202560#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 202559#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 202557#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 202554#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 202550#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 202536#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 202527#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 202518#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 202513#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 202509#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 202510#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 204222#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 204223#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 204225#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 204224#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 204221#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 204217#L2854-1 assume !(0 != timeShift_~tmp___9~3); 204218#L2945-3 assume !(1 == ~doorState~0); 205396#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 205386#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 205380#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 205361#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 205357#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 205358#L2672-3 assume !(1 == ~currentHeading~0); 205433#L2682-9 assume !(0 == ~currentFloorID~0); 202915#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 202913#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 202910#L1436-1 assume !(-1 == ~expectedDirection~0); 202907#L1448-1 assume !(1 == ~expectedDirection~0); 202906#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 202905#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 202904#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 202901#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 202898#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 202894#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 202882#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 202873#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 202866#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 202859#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 202855#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 202856#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 207665#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 207666#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 207668#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 207667#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 207664#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 207651#L2854-2 assume !(0 != timeShift_~tmp___9~3); 207652#L2945-6 assume !(1 == ~doorState~0); 209251#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 209246#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 209227#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 209225#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 209222#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 209223#L2672-6 assume !(1 == ~currentHeading~0); 210821#L2682-18 assume !(0 == ~currentFloorID~0); 198615#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 206397#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 206394#L1436-2 assume !(-1 == ~expectedDirection~0); 206391#L1448-2 assume !(1 == ~expectedDirection~0); 206390#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 206388#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 206383#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 206382#L970-1 assume 0 == initPersonOnFloor_~floor; 206354#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 206347#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 206345#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 206346#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 214055#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 214054#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 214052#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 213973#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 198229#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 215137#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 215131#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 215128#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 206294#L699-63 assume !(0 == isFloorCalling_~floorID); 206295#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 215120#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 215117#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 215118#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 215119#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 215116#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 215114#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 215113#L2854-3 assume !(0 != timeShift_~tmp___9~3); 200030#L2945-9 assume !(1 == ~doorState~0); 200031#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 200033#L2296-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 198598#L1273-15 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 198599#L2300-6 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 196381#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 196877#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 198196#L2672-9 assume !(1 == ~currentHeading~0); 220900#L2682-27 assume !(0 == ~currentFloorID~0); 198792#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 198775#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 214286#L1436-3 assume !(-1 == ~expectedDirection~0); 214280#L1448-3 assume !(1 == ~expectedDirection~0); 214275#L1449-3 cleanup_~i~0 := 0; 214273#L188-2 [2018-12-09 10:49:21,868 INFO L796 eck$LassoCheckResult]: Loop: 214273#L188-2 assume !false; 214272#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 214271#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 214270#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 214265#L196 assume 1 != cleanup_~tmp___0~0; 214190#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 214185#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 214183#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 214148#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 213902#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 214142#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 214140#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 214138#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 214136#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 214133#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 214098#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 198231#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 201116#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 210876#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 210877#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 210828#L699-89 assume !(0 == isFloorCalling_~floorID); 210829#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 216391#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 216388#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 216389#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 216392#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 216390#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 216387#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 216385#L2854-4 assume !(0 != timeShift_~tmp___9~3); 200035#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 200009#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 200010#L2296-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 198802#L1273-20 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 198803#L2300-8 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 196658#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 196881#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 200550#L2672-12 assume !(1 == ~currentHeading~0); 200551#L2682-36 assume !(0 == ~currentFloorID~0); 198759#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 198749#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 214283#L1436-4 assume !(-1 == ~expectedDirection~0); 214277#L1448-4 assume !(1 == ~expectedDirection~0); 214274#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 214273#L188-2 [2018-12-09 10:49:21,873 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:21,873 INFO L82 PathProgramCache]: Analyzing trace with hash -1046251052, now seen corresponding path program 1 times [2018-12-09 10:49:21,873 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:21,873 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:21,874 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:21,874 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:21,874 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:21,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:21,921 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:21,922 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:21,922 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:21,922 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:21,922 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:21,922 INFO L82 PathProgramCache]: Analyzing trace with hash -168805024, now seen corresponding path program 1 times [2018-12-09 10:49:21,922 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:21,922 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:21,923 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:21,923 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:21,923 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:21,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:21,961 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:21,961 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:21,961 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-09 10:49:21,962 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:21,962 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-09 10:49:21,962 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-09 10:49:21,962 INFO L87 Difference]: Start difference. First operand 25047 states and 46973 transitions. cyclomatic complexity: 21927 Second operand 5 states. [2018-12-09 10:49:25,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:25,496 INFO L93 Difference]: Finished difference Result 59539 states and 111823 transitions. [2018-12-09 10:49:25,496 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-12-09 10:49:25,496 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 59539 states and 111823 transitions. [2018-12-09 10:49:25,651 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15292 [2018-12-09 10:49:25,768 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 59539 states to 59539 states and 111823 transitions. [2018-12-09 10:49:25,768 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 59539 [2018-12-09 10:49:25,801 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 59539 [2018-12-09 10:49:25,801 INFO L73 IsDeterministic]: Start isDeterministic. Operand 59539 states and 111823 transitions. [2018-12-09 10:49:25,829 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:25,829 INFO L705 BuchiCegarLoop]: Abstraction has 59539 states and 111823 transitions. [2018-12-09 10:49:25,857 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59539 states and 111823 transitions. [2018-12-09 10:49:26,197 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59539 to 24475. [2018-12-09 10:49:26,198 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 24475 states. [2018-12-09 10:49:26,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24475 states to 24475 states and 45839 transitions. [2018-12-09 10:49:26,223 INFO L728 BuchiCegarLoop]: Abstraction has 24475 states and 45839 transitions. [2018-12-09 10:49:26,223 INFO L608 BuchiCegarLoop]: Abstraction has 24475 states and 45839 transitions. [2018-12-09 10:49:26,223 INFO L442 BuchiCegarLoop]: ======== Iteration 7============ [2018-12-09 10:49:26,223 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 24475 states and 45839 transitions. [2018-12-09 10:49:26,264 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5775 [2018-12-09 10:49:26,264 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:26,264 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:26,267 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:26,267 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:26,267 INFO L794 eck$LassoCheckResult]: Stem: 284151#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 284152#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 285812#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 286127#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 284890#L385 assume 0 != main_~tmp~8; 284891#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 282145#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 282146#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 283810#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 284914#L970 assume 0 == initPersonOnFloor_~floor; 285581#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 280947#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 283583#L762 assume !(0 == callOnFloor_~floorID); 283459#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 280733#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 280734#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 284983#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 284984#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 282256#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 282257#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 286208#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 282212#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 280866#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 282000#L699 assume !(0 == isFloorCalling_~floorID); 282001#L703 assume !(1 == isFloorCalling_~floorID); 285759#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 285760#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 281797#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 281798#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 285971#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 285293#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 280755#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 280757#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 286673#L2854 assume !(0 != timeShift_~tmp___9~3); 284548#L2945 assume !(1 == ~doorState~0); 284549#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 284551#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 285329#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 286498#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 280996#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 281701#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 282744#L2672 assume !(1 == ~currentHeading~0); 285014#L2682 assume !(0 == ~currentFloorID~0); 283235#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 283215#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 287008#L1436 assume !(-1 == ~expectedDirection~0); 287004#L1448 assume !(1 == ~expectedDirection~0); 287003#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 287002#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 287001#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 286998#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 286993#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 286989#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 286978#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 286969#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 286961#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 286958#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 286956#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 286955#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 286953#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 286950#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 286951#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 293292#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 293291#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 293289#L2854-1 assume !(0 != timeShift_~tmp___9~3); 293290#L2945-3 assume !(1 == ~doorState~0); 305011#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 285334#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 285335#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 281664#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 281665#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 282755#L2672-3 assume !(1 == ~currentHeading~0); 285003#L2682-9 assume !(0 == ~currentFloorID~0); 283223#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 292005#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 291995#L1436-1 assume !(-1 == ~expectedDirection~0); 291996#L1448-1 assume !(1 == ~expectedDirection~0); 291989#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 291990#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 291844#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 291845#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 298647#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 291985#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 291843#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 291838#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 291802#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 291799#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 291798#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 291797#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 291789#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 291790#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 291792#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 291791#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 291788#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 291776#L2854-2 assume !(0 != timeShift_~tmp___9~3); 284541#L2945-6 assume !(1 == ~doorState~0); 284542#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 286658#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 286659#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 304834#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 304832#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 285007#L2672-6 assume !(1 == ~currentHeading~0); 285008#L2682-18 assume !(0 == ~currentFloorID~0); 283161#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 290383#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 290380#L1436-2 assume !(-1 == ~expectedDirection~0); 290377#L1448-2 assume !(1 == ~expectedDirection~0); 290376#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 290374#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 290369#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 290367#L970-1 assume 0 == initPersonOnFloor_~floor; 290368#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 290324#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 290325#L762-2 assume !(0 == callOnFloor_~floorID); 297023#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 290315#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 290316#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 290310#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 290311#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 300886#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 291982#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 290358#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 290041#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 290016#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 289793#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 289792#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 289791#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 289783#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 289784#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 289786#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 289785#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 289782#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 289778#L2854-3 assume !(0 != timeShift_~tmp___9~3); 289779#L2945-9 assume !(1 == ~doorState~0); 304753#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 286661#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 286662#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 281483#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 281484#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 282759#L2672-9 assume !(1 == ~currentHeading~0); 304886#L2682-27 assume !(0 == ~currentFloorID~0); 287194#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 287172#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 287164#L1436-3 assume !(-1 == ~expectedDirection~0); 287163#L1448-3 assume !(1 == ~expectedDirection~0); 287145#L1449-3 cleanup_~i~0 := 0; 287144#L188-2 [2018-12-09 10:49:26,268 INFO L796 eck$LassoCheckResult]: Loop: 287144#L188-2 assume !false; 287139#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 287140#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 287135#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 287136#L196 assume 1 != cleanup_~tmp___0~0; 287129#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 287130#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 287108#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 287109#L2200 assume !(0 != anyStopRequested_~tmp___3~1); 287075#L2204 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 287070#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 287065#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 287066#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 287061#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 287062#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 287057#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 287058#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 287052#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 287051#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 287050#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 287020#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 287017#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 287016#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 287015#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 287013#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 287010#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 287011#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 288620#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 288619#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 288618#L2854-4 assume !(0 != timeShift_~tmp___9~3); 284533#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 284510#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 284511#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 286666#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 304894#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 304892#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 304891#L2672-12 assume !(1 == ~currentHeading~0); 304890#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 283333#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 287173#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 287158#L1436-4 assume !(-1 == ~expectedDirection~0); 287157#L1448-4 assume !(1 == ~expectedDirection~0); 287143#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 287144#L188-2 [2018-12-09 10:49:26,268 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:26,268 INFO L82 PathProgramCache]: Analyzing trace with hash -1723882246, now seen corresponding path program 1 times [2018-12-09 10:49:26,269 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:26,271 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:26,272 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:26,272 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:26,272 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:26,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:26,316 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:26,316 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:26,317 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:26,317 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:26,317 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:26,317 INFO L82 PathProgramCache]: Analyzing trace with hash 1402930893, now seen corresponding path program 1 times [2018-12-09 10:49:26,317 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:26,317 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:26,318 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:26,318 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:26,318 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:26,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:26,336 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:26,336 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:26,336 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-09 10:49:26,336 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:26,336 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-09 10:49:26,337 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-09 10:49:26,337 INFO L87 Difference]: Start difference. First operand 24475 states and 45839 transitions. cyclomatic complexity: 21365 Second operand 5 states. [2018-12-09 10:49:29,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:29,165 INFO L93 Difference]: Finished difference Result 109521 states and 206920 transitions. [2018-12-09 10:49:29,166 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-12-09 10:49:29,166 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 109521 states and 206920 transitions. [2018-12-09 10:49:29,473 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 28056 [2018-12-09 10:49:29,703 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 109521 states to 109521 states and 206920 transitions. [2018-12-09 10:49:29,703 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 109521 [2018-12-09 10:49:29,772 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 109521 [2018-12-09 10:49:29,772 INFO L73 IsDeterministic]: Start isDeterministic. Operand 109521 states and 206920 transitions. [2018-12-09 10:49:29,825 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:29,826 INFO L705 BuchiCegarLoop]: Abstraction has 109521 states and 206920 transitions. [2018-12-09 10:49:29,877 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109521 states and 206920 transitions. [2018-12-09 10:49:30,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109521 to 47835. [2018-12-09 10:49:30,562 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 47835 states. [2018-12-09 10:49:30,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47835 states to 47835 states and 89639 transitions. [2018-12-09 10:49:30,613 INFO L728 BuchiCegarLoop]: Abstraction has 47835 states and 89639 transitions. [2018-12-09 10:49:30,613 INFO L608 BuchiCegarLoop]: Abstraction has 47835 states and 89639 transitions. [2018-12-09 10:49:30,613 INFO L442 BuchiCegarLoop]: ======== Iteration 8============ [2018-12-09 10:49:30,613 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47835 states and 89639 transitions. [2018-12-09 10:49:30,691 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11296 [2018-12-09 10:49:30,692 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:30,692 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:30,694 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:30,694 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:30,695 INFO L794 eck$LassoCheckResult]: Stem: 418230#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 418231#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 420064#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 420438#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 419065#L385 assume 0 != main_~tmp~8; 419066#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 416179#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 416180#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 417853#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 419092#L970 assume 0 == initPersonOnFloor_~floor; 419828#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 414962#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 417620#L762 assume !(0 == callOnFloor_~floorID); 417490#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 414815#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 422252#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 422251#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 422249#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 422247#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 422248#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 422262#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 416249#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 414881#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 416014#L699 assume !(0 == isFloorCalling_~floorID); 416015#L703 assume !(1 == isFloorCalling_~floorID); 420015#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 418340#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 415812#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 415814#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 420309#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 422068#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 422067#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 422066#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 422065#L2854 assume !(0 != timeShift_~tmp___9~3); 422064#L2945 assume !(1 == ~doorState~0); 422063#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 422061#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 422062#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 420822#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 415011#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 421961#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 421959#L2672 assume !(1 == ~currentHeading~0); 421956#L2682 assume !(0 == ~currentFloorID~0); 421950#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 421949#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 421947#L1436 assume !(-1 == ~expectedDirection~0); 421943#L1448 assume !(1 == ~expectedDirection~0); 421942#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 421941#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 421939#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 421937#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 421931#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 421928#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 421926#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 421923#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 421916#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 421913#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 421910#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 421909#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 421908#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 421765#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 421760#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 421758#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 421757#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 421755#L2854-1 assume !(0 != timeShift_~tmp___9~3); 421754#L2945-3 assume !(1 == ~doorState~0); 421752#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 421748#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 421624#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 421602#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 421594#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 421587#L2672-3 assume !(1 == ~currentHeading~0); 421578#L2682-9 assume !(0 == ~currentFloorID~0); 421566#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 421565#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 430431#L1436-1 assume !(-1 == ~expectedDirection~0); 430428#L1448-1 assume !(1 == ~expectedDirection~0); 430427#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 430426#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 430425#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 430423#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 430422#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 421269#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 421262#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 421250#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 421207#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 421192#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 421190#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 421187#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 421128#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 421126#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 421122#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 421120#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 421119#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 421117#L2854-2 assume !(0 != timeShift_~tmp___9~3); 421116#L2945-6 assume !(1 == ~doorState~0); 421115#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 421113#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 421090#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 421091#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 427872#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 427873#L2672-6 assume !(1 == ~currentHeading~0); 428645#L2682-18 assume !(0 == ~currentFloorID~0); 430127#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 430125#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 430122#L1436-2 assume !(-1 == ~expectedDirection~0); 430119#L1448-2 assume !(1 == ~expectedDirection~0); 430118#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 430114#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 430109#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 430107#L970-1 assume 0 == initPersonOnFloor_~floor; 430082#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 430075#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 430073#L762-2 assume !(0 == callOnFloor_~floorID); 430070#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 430068#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 430067#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 430066#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 430064#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 430063#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 429377#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 429244#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 429201#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 429193#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 429172#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 429170#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 429169#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 429094#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 429093#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 429088#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 429086#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 429085#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 429083#L2854-3 assume !(0 != timeShift_~tmp___9~3); 429058#L2945-9 assume !(1 == ~doorState~0); 429055#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 429023#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 428999#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 428972#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 428970#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 428971#L2672-9 assume !(1 == ~currentHeading~0); 429246#L2682-27 assume !(0 == ~currentFloorID~0); 429247#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 448344#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 448341#L1436-3 assume !(-1 == ~expectedDirection~0); 448335#L1448-3 assume !(1 == ~expectedDirection~0); 448330#L1449-3 cleanup_~i~0 := 0; 448328#L188-2 [2018-12-09 10:49:30,695 INFO L796 eck$LassoCheckResult]: Loop: 448328#L188-2 assume !false; 448327#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 448326#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 448325#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 448324#L196 assume 1 != cleanup_~tmp___0~0; 448321#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 448318#L699-84 assume !(0 == isFloorCalling_~floorID); 448314#L703-84 assume !(1 == isFloorCalling_~floorID); 448300#L707-84 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 448293#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 448283#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 448278#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 448277#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 448276#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 448275#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 448274#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 448272#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 448271#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 428577#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 428569#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 428560#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 428524#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 428413#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 428411#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 428410#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 428409#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 428408#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 428403#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 428402#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 428401#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 428400#L2854-4 assume !(0 != timeShift_~tmp___9~3); 428399#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 428398#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 428396#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 428385#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 428386#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 428688#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 428689#L2672-12 assume !(1 == ~currentHeading~0); 428653#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 428654#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 448343#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 448338#L1436-4 assume !(-1 == ~expectedDirection~0); 448332#L1448-4 assume !(1 == ~expectedDirection~0); 448329#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 448328#L188-2 [2018-12-09 10:49:30,696 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:30,696 INFO L82 PathProgramCache]: Analyzing trace with hash -1723882246, now seen corresponding path program 2 times [2018-12-09 10:49:30,696 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:30,698 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:30,699 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:30,699 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:30,699 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:30,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:30,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:30,742 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:30,742 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:30,742 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:30,743 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:30,743 INFO L82 PathProgramCache]: Analyzing trace with hash 1643176351, now seen corresponding path program 1 times [2018-12-09 10:49:30,743 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:30,743 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:30,743 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:30,743 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-09 10:49:30,743 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:30,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:30,749 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:30,749 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:30,749 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-09 10:49:30,750 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:30,750 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-09 10:49:30,750 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-09 10:49:30,750 INFO L87 Difference]: Start difference. First operand 47835 states and 89639 transitions. cyclomatic complexity: 41805 Second operand 3 states. [2018-12-09 10:49:31,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:31,397 INFO L93 Difference]: Finished difference Result 52279 states and 97631 transitions. [2018-12-09 10:49:31,397 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-09 10:49:31,397 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 52279 states and 97631 transitions. [2018-12-09 10:49:31,536 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11670 [2018-12-09 10:49:31,639 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 52279 states to 52279 states and 97631 transitions. [2018-12-09 10:49:31,640 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 52279 [2018-12-09 10:49:31,671 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 52279 [2018-12-09 10:49:31,671 INFO L73 IsDeterministic]: Start isDeterministic. Operand 52279 states and 97631 transitions. [2018-12-09 10:49:31,694 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:31,694 INFO L705 BuchiCegarLoop]: Abstraction has 52279 states and 97631 transitions. [2018-12-09 10:49:31,718 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52279 states and 97631 transitions. [2018-12-09 10:49:31,970 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52279 to 47299. [2018-12-09 10:49:31,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 47299 states. [2018-12-09 10:49:32,021 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47299 states to 47299 states and 88631 transitions. [2018-12-09 10:49:32,021 INFO L728 BuchiCegarLoop]: Abstraction has 47299 states and 88631 transitions. [2018-12-09 10:49:32,021 INFO L608 BuchiCegarLoop]: Abstraction has 47299 states and 88631 transitions. [2018-12-09 10:49:32,021 INFO L442 BuchiCegarLoop]: ======== Iteration 9============ [2018-12-09 10:49:32,021 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47299 states and 88631 transitions. [2018-12-09 10:49:32,104 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11000 [2018-12-09 10:49:32,104 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:32,104 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:32,106 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:32,106 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:32,106 INFO L794 eck$LassoCheckResult]: Stem: 518320#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 518321#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 519981#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 520289#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 519092#L385 assume 0 != main_~tmp~8; 519093#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 516289#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 516290#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 517950#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 519118#L970 assume 0 == initPersonOnFloor_~floor; 519767#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 515087#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 517717#L762 assume !(0 == callOnFloor_~floorID); 517592#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 514940#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 552137#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 552136#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 552134#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 552132#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 552133#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 552152#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 516355#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 515006#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 516138#L699 assume !(0 == isFloorCalling_~floorID); 516139#L703 assume !(1 == isFloorCalling_~floorID); 519935#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 518414#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 515942#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 515943#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 520120#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 519486#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 514895#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 514897#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 520813#L2854 assume !(0 != timeShift_~tmp___9~3); 518724#L2945 assume !(1 == ~doorState~0); 518725#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 518727#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 519524#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 550363#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 518172#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 550353#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 550349#L2672 assume !(1 == ~currentHeading~0); 550347#L2682 assume !(0 == ~currentFloorID~0); 547837#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 547836#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 547834#L1436 assume !(-1 == ~expectedDirection~0); 547829#L1448 assume !(1 == ~expectedDirection~0); 547827#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 547822#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 547820#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 547819#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 547815#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 547811#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 547808#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 547805#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 547773#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 547761#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 547758#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 547756#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 547751#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 547746#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 547738#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 547735#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 547732#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 547726#L2854-1 assume !(0 != timeShift_~tmp___9~3); 547725#L2945-3 assume !(1 == ~doorState~0); 547724#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 547721#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 547722#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 547895#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 550151#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 550150#L2672-3 assume !(1 == ~currentHeading~0); 547582#L2682-9 assume !(0 == ~currentFloorID~0); 547576#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 547574#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 547571#L1436-1 assume !(-1 == ~expectedDirection~0); 547568#L1448-1 assume !(1 == ~expectedDirection~0); 547567#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 547566#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 547565#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 547563#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 547564#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 539866#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 539862#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 539859#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 539821#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 539818#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 539816#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 539815#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 539804#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 539805#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 539810#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 539806#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 539807#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 547098#L2854-2 assume !(0 != timeShift_~tmp___9~3); 547099#L2945-6 assume !(1 == ~doorState~0); 547135#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 547132#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 547133#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 547128#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 547376#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 547377#L2672-6 assume !(1 == ~currentHeading~0); 547024#L2682-18 assume !(0 == ~currentFloorID~0); 536894#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 536890#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 536887#L1436-2 assume !(-1 == ~expectedDirection~0); 536884#L1448-2 assume !(1 == ~expectedDirection~0); 536883#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 536881#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 536876#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 536875#L970-1 assume 0 == initPersonOnFloor_~floor; 536847#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 536840#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 536839#L762-2 assume !(0 == callOnFloor_~floorID); 536836#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 536834#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 536832#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 536833#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 539994#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 539992#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 536821#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 536815#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 536811#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 536566#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 536497#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 536489#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 536487#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 536483#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 536485#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 536488#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 536486#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 536444#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 536445#L2854-3 assume !(0 != timeShift_~tmp___9~3); 546348#L2945-9 assume !(1 == ~doorState~0); 546300#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 546291#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 536647#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 536594#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 536442#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 536443#L2672-9 assume !(1 == ~currentHeading~0); 536591#L2682-27 assume !(0 == ~currentFloorID~0); 536375#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 520843#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 520840#L1436-3 assume !(-1 == ~expectedDirection~0); 520834#L1448-3 assume !(1 == ~expectedDirection~0); 520829#L1449-3 cleanup_~i~0 := 0; 520827#L188-2 [2018-12-09 10:49:32,107 INFO L796 eck$LassoCheckResult]: Loop: 520827#L188-2 assume !false; 520826#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 520825#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 520823#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 520824#L196 assume 1 != cleanup_~tmp___0~0; 521468#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 521467#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 521466#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 521464#L2200 assume !(0 != anyStopRequested_~tmp___3~1); 521462#L2204 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 521461#L699-85 assume !(0 == isFloorCalling_~floorID); 521455#L703-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 521416#L726-85 anyStopRequested_#t~ret71 := isFloorCalling_#res;anyStopRequested_~tmp___2~2 := anyStopRequested_#t~ret71;havoc anyStopRequested_#t~ret71; 521328#L2211 assume 0 != anyStopRequested_~tmp___2~2;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 521322#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 521314#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 521315#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 521306#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 521307#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 521295#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 521296#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 521158#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 521146#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 521137#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 521129#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 521126#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 521124#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 521123#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 521122#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 521121#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 521115#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 521110#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 521104#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 521098#L2854-4 assume !(0 != timeShift_~tmp___9~3); 521095#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 521083#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 521075#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 521058#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 521052#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 521048#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 521049#L2672-12 assume !(1 == ~currentHeading~0); 521300#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 520850#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 520842#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 520837#L1436-4 assume !(-1 == ~expectedDirection~0); 520831#L1448-4 assume !(1 == ~expectedDirection~0); 520828#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 520827#L188-2 [2018-12-09 10:49:32,112 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:32,112 INFO L82 PathProgramCache]: Analyzing trace with hash -1723882246, now seen corresponding path program 3 times [2018-12-09 10:49:32,112 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:32,112 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:32,112 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:32,113 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:32,113 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:32,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:32,165 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:32,165 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:32,165 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:32,166 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:32,166 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:32,166 INFO L82 PathProgramCache]: Analyzing trace with hash -927398331, now seen corresponding path program 1 times [2018-12-09 10:49:32,166 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:32,166 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:32,166 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:32,166 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-09 10:49:32,167 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:32,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:32,182 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:32,182 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:32,182 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:32,182 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:32,182 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-12-09 10:49:32,183 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-12-09 10:49:32,183 INFO L87 Difference]: Start difference. First operand 47299 states and 88631 transitions. cyclomatic complexity: 41333 Second operand 4 states. [2018-12-09 10:49:32,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:32,667 INFO L93 Difference]: Finished difference Result 86861 states and 163195 transitions. [2018-12-09 10:49:32,667 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-12-09 10:49:32,667 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 86861 states and 163195 transitions. [2018-12-09 10:49:33,770 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20946 [2018-12-09 10:49:33,906 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 86861 states to 86861 states and 163195 transitions. [2018-12-09 10:49:33,906 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 86861 [2018-12-09 10:49:33,946 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 86861 [2018-12-09 10:49:33,946 INFO L73 IsDeterministic]: Start isDeterministic. Operand 86861 states and 163195 transitions. [2018-12-09 10:49:33,980 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:33,981 INFO L705 BuchiCegarLoop]: Abstraction has 86861 states and 163195 transitions. [2018-12-09 10:49:34,010 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86861 states and 163195 transitions. [2018-12-09 10:49:34,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86861 to 47351. [2018-12-09 10:49:34,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 47351 states. [2018-12-09 10:49:34,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47351 states to 47351 states and 88683 transitions. [2018-12-09 10:49:34,388 INFO L728 BuchiCegarLoop]: Abstraction has 47351 states and 88683 transitions. [2018-12-09 10:49:34,388 INFO L608 BuchiCegarLoop]: Abstraction has 47351 states and 88683 transitions. [2018-12-09 10:49:34,388 INFO L442 BuchiCegarLoop]: ======== Iteration 10============ [2018-12-09 10:49:34,388 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47351 states and 88683 transitions. [2018-12-09 10:49:34,470 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11012 [2018-12-09 10:49:34,470 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:34,470 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:34,472 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:34,472 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:34,472 INFO L794 eck$LassoCheckResult]: Stem: 652569#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 652570#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 654354#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 654719#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 653414#L385 assume 0 != main_~tmp~8; 653415#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 650496#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 650497#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 652194#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 653439#L970 assume 0 == initPersonOnFloor_~floor; 654120#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 649260#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 651949#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 649040#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 649041#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 649832#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 649124#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 649125#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 650615#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 655941#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 650567#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 649179#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 650333#L699 assume !(0 == isFloorCalling_~floorID); 650334#L703 assume !(1 == isFloorCalling_~floorID); 654303#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 654304#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 650134#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 650135#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 654511#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 653828#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 649067#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 649069#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 655286#L2854 assume !(0 != timeShift_~tmp___9~3); 655287#L2945 assume !(1 == ~doorState~0); 653022#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 653023#L2296 assume !(1 == stopRequestedInDirection_~dir); 654375#L2465 assume !(0 == ~currentFloorID~0); 654376#L2471 assume !(~currentFloorID~0 > 0); 652809#L2486 assume ~currentFloorID~0 > 0; 652624#L2488 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 652268#L2489 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 652269#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 655311#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 653552#L2672 assume !(1 == ~currentHeading~0); 653553#L2682 assume !(0 == ~currentFloorID~0); 651592#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 651571#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 660153#L1436 assume !(-1 == ~expectedDirection~0); 660082#L1448 assume !(1 == ~expectedDirection~0); 659974#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 659969#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 659967#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 659966#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 659964#L1367-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 659965#L2109-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 666817#L2130-16 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 666816#L1371-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 666812#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 667283#L699-21 assume !(0 == isFloorCalling_~floorID); 667282#L703-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 667274#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 667271#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 667272#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 667278#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 667273#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 667270#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 667263#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 667255#L2854-1 assume !(0 != timeShift_~tmp___9~3); 656714#L2945-3 assume !(1 == ~doorState~0); 656002#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 656003#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 670289#L2465-2 assume !(0 == ~currentFloorID~0); 670288#L2471-2 assume !(~currentFloorID~0 > 0); 655389#L2486-2 assume ~currentFloorID~0 > 0; 670268#L2488-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 652273#L2489-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 649281#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 661578#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 653537#L2672-3 assume !(1 == ~currentHeading~0); 653538#L2682-9 assume !(0 == ~currentFloorID~0); 651583#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 651512#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 693160#L1436-1 assume !(-1 == ~expectedDirection~0); 693157#L1448-1 assume !(1 == ~expectedDirection~0); 677556#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 677555#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 677554#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 677552#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 677535#L1367-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 677533#L2109-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 677529#L2130-27 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 677522#L1371-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 677521#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 677520#L699-42 assume !(0 == isFloorCalling_~floorID); 677519#L703-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 677515#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 677514#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 677513#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 664973#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 664965#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 662210#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 662199#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 661818#L2854-2 assume !(0 != timeShift_~tmp___9~3); 656701#L2945-6 assume !(1 == ~doorState~0); 656702#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 661762#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 655411#L2465-4 assume !(0 == ~currentFloorID~0); 655412#L2471-4 assume !(~currentFloorID~0 > 0); 655405#L2486-4 assume ~currentFloorID~0 > 0; 661735#L2488-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 652287#L2489-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 652288#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 662011#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 662012#L2672-6 assume !(1 == ~currentHeading~0); 671849#L2682-18 assume !(0 == ~currentFloorID~0); 651525#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 651174#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 651175#L1436-2 assume !(-1 == ~expectedDirection~0); 652164#L1448-2 assume !(1 == ~expectedDirection~0); 651575#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 651576#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 694848#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 694846#L970-1 assume 0 == initPersonOnFloor_~floor; 694813#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 694804#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 651928#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 649054#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 694639#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 694637#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 694635#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 694630#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 685719#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 685714#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 685701#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 685697#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 685696#L699-63 assume !(0 == isFloorCalling_~floorID); 685693#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 685687#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 685683#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 685684#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 685689#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 685686#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 685685#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 685682#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 685679#L2854-3 assume !(0 != timeShift_~tmp___9~3); 676406#L2945-9 assume !(1 == ~doorState~0); 695917#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 695916#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 695915#L2465-6 assume !(0 == ~currentFloorID~0); 695914#L2471-6 assume !(~currentFloorID~0 > 0); 652503#L2486-6 assume ~currentFloorID~0 > 0; 652505#L2488-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 652251#L2489-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 649303#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 671878#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 653524#L2672-9 assume !(1 == ~currentHeading~0); 653525#L2682-27 assume !(0 == ~currentFloorID~0); 651696#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 651115#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 651116#L1436-3 assume !(-1 == ~expectedDirection~0); 652156#L1448-3 assume !(1 == ~expectedDirection~0); 651379#L1449-3 cleanup_~i~0 := 0; 651581#L188-2 [2018-12-09 10:49:34,473 INFO L796 eck$LassoCheckResult]: Loop: 651581#L188-2 assume !false; 695323#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 695322#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 695321#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 695320#L196 assume 1 != cleanup_~tmp___0~0; 695319#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 695318#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 652368#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 652369#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 693776#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 693774#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 693772#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 693770#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 693767#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 693764#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 693765#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 693826#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 693822#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 693738#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 693737#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 693736#L699-89 assume !(0 == isFloorCalling_~floorID); 693733#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 693727#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 693722#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 693723#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 693729#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 693726#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 693724#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 693725#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 696177#L2854-4 assume !(0 != timeShift_~tmp___9~3); 696173#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 652975#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 652976#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 655275#L2465-8 assume !(0 == ~currentFloorID~0); 655344#L2471-8 assume !(~currentFloorID~0 > 0); 655343#L2486-8 assume ~currentFloorID~0 > 0; 655337#L2488-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 655338#L2489-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 661583#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 661584#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 653506#L2672-12 assume !(1 == ~currentHeading~0); 653507#L2682-36 assume !(0 == ~currentFloorID~0); 651664#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 651089#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 651090#L1436-4 assume !(-1 == ~expectedDirection~0); 652158#L1448-4 assume !(1 == ~expectedDirection~0); 651395#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 651581#L188-2 [2018-12-09 10:49:34,479 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:34,480 INFO L82 PathProgramCache]: Analyzing trace with hash 480871056, now seen corresponding path program 1 times [2018-12-09 10:49:34,480 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:34,480 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:34,480 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:34,480 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:34,481 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:34,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:34,524 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:34,524 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:34,524 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:34,524 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:34,525 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:34,525 INFO L82 PathProgramCache]: Analyzing trace with hash 1521936943, now seen corresponding path program 1 times [2018-12-09 10:49:34,525 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:34,525 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:34,525 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:34,525 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:34,525 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:34,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:34,548 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:34,549 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:34,549 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-09 10:49:34,549 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:34,549 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-09 10:49:34,549 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-09 10:49:34,549 INFO L87 Difference]: Start difference. First operand 47351 states and 88683 transitions. cyclomatic complexity: 41333 Second operand 5 states. [2018-12-09 10:49:35,927 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:35,927 INFO L93 Difference]: Finished difference Result 62377 states and 116391 transitions. [2018-12-09 10:49:35,927 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-09 10:49:35,928 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 62377 states and 116391 transitions. [2018-12-09 10:49:36,089 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 14824 [2018-12-09 10:49:36,211 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 62377 states to 62377 states and 116391 transitions. [2018-12-09 10:49:36,211 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 62377 [2018-12-09 10:49:36,247 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 62377 [2018-12-09 10:49:36,248 INFO L73 IsDeterministic]: Start isDeterministic. Operand 62377 states and 116391 transitions. [2018-12-09 10:49:36,276 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:36,276 INFO L705 BuchiCegarLoop]: Abstraction has 62377 states and 116391 transitions. [2018-12-09 10:49:36,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62377 states and 116391 transitions. [2018-12-09 10:49:36,652 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62377 to 61899. [2018-12-09 10:49:36,652 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 61899 states. [2018-12-09 10:49:36,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61899 states to 61899 states and 115661 transitions. [2018-12-09 10:49:36,720 INFO L728 BuchiCegarLoop]: Abstraction has 61899 states and 115661 transitions. [2018-12-09 10:49:36,720 INFO L608 BuchiCegarLoop]: Abstraction has 61899 states and 115661 transitions. [2018-12-09 10:49:36,720 INFO L442 BuchiCegarLoop]: ======== Iteration 11============ [2018-12-09 10:49:36,720 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 61899 states and 115661 transitions. [2018-12-09 10:49:36,923 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 14686 [2018-12-09 10:49:36,923 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:36,923 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:36,926 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:36,926 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:36,926 INFO L794 eck$LassoCheckResult]: Stem: 762246#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 762247#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 763924#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 764255#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 763031#L385 assume 0 != main_~tmp~8; 763032#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 760217#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 760218#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 761905#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 763056#L970 assume 0 == initPersonOnFloor_~floor; 763714#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 759004#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 761669#L762 assume !(0 == callOnFloor_~floorID); 761540#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 758786#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 758787#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 759578#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 758868#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 758870#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 760647#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 763799#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 760567#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 758923#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 760065#L699 assume !(0 == isFloorCalling_~floorID); 760066#L703 assume !(1 == isFloorCalling_~floorID); 763885#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 762339#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 759877#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 759878#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 764076#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 763430#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 758813#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 758815#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 764797#L2854 assume !(0 != timeShift_~tmp___9~3); 762653#L2945 assume !(1 == ~doorState~0); 762654#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 762656#L2296 assume !(1 == stopRequestedInDirection_~dir); 763466#L2465 assume !(0 == ~currentFloorID~0); 763607#L2471 assume ~currentFloorID~0 > 0; 763502#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 760060#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 760061#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 762321#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 764623#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 764874#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 773688#L2672 assume !(1 == ~currentHeading~0); 773686#L2682 assume !(0 == ~currentFloorID~0); 772974#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 772973#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 772971#L1436 assume !(-1 == ~expectedDirection~0); 772965#L1448 assume !(1 == ~expectedDirection~0); 772963#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 772962#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 772961#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 772959#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 772960#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 772969#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 772968#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 772964#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 772933#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 772929#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 772925#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 772924#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 772922#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 772918#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 772913#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 772911#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 772910#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 772908#L2854-1 assume !(0 != timeShift_~tmp___9~3); 772907#L2945-3 assume !(1 == ~doorState~0); 772906#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 772904#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 772905#L2465-2 assume !(0 == ~currentFloorID~0); 773750#L2471-2 assume ~currentFloorID~0 > 0; 773751#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 775152#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 775153#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 775151#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 775059#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 773764#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 772845#L2672-3 assume !(1 == ~currentHeading~0); 772841#L2682-9 assume !(0 == ~currentFloorID~0); 771921#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 771917#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 771885#L1436-1 assume !(-1 == ~expectedDirection~0); 771875#L1448-1 assume !(1 == ~expectedDirection~0); 771873#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 771870#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 771868#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 771865#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 771866#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 770318#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 770314#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 770311#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 770288#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 770281#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 770279#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 770210#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 770199#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 770201#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 770211#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 770202#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 768462#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 768463#L2854-2 assume !(0 != timeShift_~tmp___9~3); 771465#L2945-6 assume !(1 == ~doorState~0); 771464#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 771462#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 771463#L2465-4 assume !(0 == ~currentFloorID~0); 771318#L2471-4 assume ~currentFloorID~0 > 0; 771316#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 771317#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 771320#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 771314#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 771315#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 785096#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 785076#L2672-6 assume !(1 == ~currentHeading~0); 785054#L2682-18 assume !(0 == ~currentFloorID~0); 785044#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 785037#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 785034#L1436-2 assume !(-1 == ~expectedDirection~0); 785031#L1448-2 assume !(1 == ~expectedDirection~0); 785030#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 785028#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 785023#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 785022#L970-1 assume 0 == initPersonOnFloor_~floor; 784992#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 784984#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 784980#L762-2 assume !(0 == callOnFloor_~floorID); 784982#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 805957#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 805956#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 805955#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 805954#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 805953#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 785382#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 785376#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 785373#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 784936#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 784929#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 784926#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 784925#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 784923#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 784920#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 784922#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 794157#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 794156#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 794154#L2854-3 assume !(0 != timeShift_~tmp___9~3); 762633#L2945-9 assume !(1 == ~doorState~0); 762634#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 784319#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 794150#L2465-6 assume !(0 == ~currentFloorID~0); 794151#L2471-6 assume !(~currentFloorID~0 > 0); 816775#L2486-6 assume ~currentFloorID~0 > 0; 799548#L2488-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 799550#L2489-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 788265#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 787508#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 787497#L2672-9 assume !(1 == ~currentHeading~0); 787498#L2682-27 assume !(0 == ~currentFloorID~0); 787486#L2682-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 787479#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 787477#L1436-3 assume !(-1 == ~expectedDirection~0); 787460#L1448-3 assume !(1 == ~expectedDirection~0); 787455#L1449-3 cleanup_~i~0 := 0; 787305#L188-2 [2018-12-09 10:49:36,927 INFO L796 eck$LassoCheckResult]: Loop: 787305#L188-2 assume !false; 787303#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 787300#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 787297#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 787296#L196 assume 1 != cleanup_~tmp___0~0; 787293#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 787276#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 787275#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 784407#L2200 assume !(0 != anyStopRequested_~tmp___3~1); 763906#L2204 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 759663#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 759664#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 760259#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 759571#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 759572#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 758898#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 758899#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 788466#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 813008#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 813007#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 812060#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 817597#L699-89 assume !(0 == isFloorCalling_~floorID); 817594#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 817588#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 817583#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 817584#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 817590#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 817587#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 817585#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 817586#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 799455#L2854-4 assume !(0 != timeShift_~tmp___9~3); 799454#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 799453#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 799451#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 763909#L2465-8 assume !(0 == ~currentFloorID~0); 763594#L2471-8 assume ~currentFloorID~0 > 0; 763595#L2472-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 799241#L699-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 799321#L726-95 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 799213#L2476-8 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 799206#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 799204#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 799201#L2672-12 assume !(1 == ~currentHeading~0); 793810#L2682-36 assume !(0 == ~currentFloorID~0); 787474#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 787468#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 787466#L1436-4 assume !(-1 == ~expectedDirection~0); 787463#L1448-4 assume !(1 == ~expectedDirection~0); 787454#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 787305#L188-2 [2018-12-09 10:49:36,933 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:36,933 INFO L82 PathProgramCache]: Analyzing trace with hash -1921492960, now seen corresponding path program 1 times [2018-12-09 10:49:36,933 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:36,933 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:36,934 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:36,934 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:36,934 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:36,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:36,960 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:36,960 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:36,961 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:36,961 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:36,961 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:36,961 INFO L82 PathProgramCache]: Analyzing trace with hash -710829399, now seen corresponding path program 1 times [2018-12-09 10:49:36,961 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:36,961 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:36,961 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:36,962 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:36,962 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:36,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:36,989 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:36,989 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:36,989 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-09 10:49:36,990 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:36,990 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-12-09 10:49:36,990 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-12-09 10:49:36,990 INFO L87 Difference]: Start difference. First operand 61899 states and 115661 transitions. cyclomatic complexity: 53763 Second operand 7 states. [2018-12-09 10:49:40,499 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:40,499 INFO L93 Difference]: Finished difference Result 229037 states and 429767 transitions. [2018-12-09 10:49:40,500 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-12-09 10:49:40,500 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 229037 states and 429767 transitions. [2018-12-09 10:49:41,399 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 48380 [2018-12-09 10:49:41,835 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 229037 states to 229037 states and 429767 transitions. [2018-12-09 10:49:41,836 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 229037 [2018-12-09 10:49:41,956 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 229037 [2018-12-09 10:49:41,956 INFO L73 IsDeterministic]: Start isDeterministic. Operand 229037 states and 429767 transitions. [2018-12-09 10:49:42,048 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:42,048 INFO L705 BuchiCegarLoop]: Abstraction has 229037 states and 429767 transitions. [2018-12-09 10:49:42,140 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 229037 states and 429767 transitions. [2018-12-09 10:49:42,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 229037 to 61899. [2018-12-09 10:49:42,839 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 61899 states. [2018-12-09 10:49:42,908 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61899 states to 61899 states and 115632 transitions. [2018-12-09 10:49:42,908 INFO L728 BuchiCegarLoop]: Abstraction has 61899 states and 115632 transitions. [2018-12-09 10:49:42,908 INFO L608 BuchiCegarLoop]: Abstraction has 61899 states and 115632 transitions. [2018-12-09 10:49:42,908 INFO L442 BuchiCegarLoop]: ======== Iteration 12============ [2018-12-09 10:49:42,908 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 61899 states and 115632 transitions. [2018-12-09 10:49:43,020 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 14686 [2018-12-09 10:49:43,020 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:43,020 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:43,022 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:43,023 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:43,023 INFO L794 eck$LassoCheckResult]: Stem: 1053291#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 1053292#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1055078#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1055570#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1054114#L385 assume 0 != main_~tmp~8; 1054115#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1051213#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1051214#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1052919#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1054144#L970 assume 0 == initPersonOnFloor_~floor; 1054851#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1049995#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1052687#L762 assume !(0 == callOnFloor_~floorID); 1052552#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1049848#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1065194#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1065193#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1065192#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1051651#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1051652#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1065174#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1051568#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1049914#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1051058#L699 assume !(0 == isFloorCalling_~floorID); 1051059#L703 assume !(1 == isFloorCalling_~floorID); 1055031#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1055032#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1050869#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1050870#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1055271#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1054536#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1049803#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1049805#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1056147#L2854 assume !(0 != timeShift_~tmp___9~3); 1056148#L2945 assume !(1 == ~doorState~0); 1053709#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1053710#L2296 assume !(1 == stopRequestedInDirection_~dir); 1055105#L2465 assume !(0 == ~currentFloorID~0); 1055106#L2471 assume ~currentFloorID~0 > 0; 1054611#L2472 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1054612#L2486 assume ~currentFloorID~0 > 0; 1053335#L2488 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1053336#L2489 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1063676#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1063674#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1063445#L2672 assume !(1 == ~currentHeading~0); 1063442#L2682 assume !(0 == ~currentFloorID~0); 1063437#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1063436#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1063434#L1436 assume !(-1 == ~expectedDirection~0); 1063428#L1448 assume !(1 == ~expectedDirection~0); 1063427#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1063426#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1063421#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1063418#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1063419#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1063518#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1063512#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1063509#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1063263#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1063093#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1063085#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1063077#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1063061#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1063041#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 1063039#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1063035#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1063033#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1063032#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1063026#L2854-1 assume !(0 != timeShift_~tmp___9~3); 1062979#L2945-3 assume !(1 == ~doorState~0); 1062977#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1062976#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 1062973#L2465-2 assume !(0 == ~currentFloorID~0); 1062974#L2471-2 assume !(~currentFloorID~0 > 0); 1063131#L2486-2 assume ~currentFloorID~0 > 0; 1063132#L2488-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1063179#L2489-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1063150#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1063148#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1063146#L2672-3 assume !(1 == ~currentHeading~0); 1063145#L2682-9 assume !(0 == ~currentFloorID~0); 1062786#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1062781#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1062771#L1436-1 assume !(-1 == ~expectedDirection~0); 1062768#L1448-1 assume !(1 == ~expectedDirection~0); 1062767#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1062766#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1062764#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1062765#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1062753#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1062747#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1062735#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1062726#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1062716#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1062712#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1062709#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1062710#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1062703#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1062701#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 1062700#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1062696#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1062694#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1062693#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1062690#L2854-2 assume !(0 != timeShift_~tmp___9~3); 1062691#L2945-6 assume !(1 == ~doorState~0); 1075223#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1075221#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 1075222#L2465-4 assume !(0 == ~currentFloorID~0); 1075344#L2471-4 assume !(~currentFloorID~0 > 0); 1075372#L2486-4 assume ~currentFloorID~0 > 0; 1075373#L2488-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1075485#L2489-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1075476#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1075474#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1075472#L2672-6 assume !(1 == ~currentHeading~0); 1075385#L2682-18 assume !(0 == ~currentFloorID~0); 1075047#L2682-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1075043#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1094306#L1436-2 assume !(-1 == ~expectedDirection~0); 1094303#L1448-2 assume !(1 == ~expectedDirection~0); 1094289#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1094285#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1094276#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1094269#L970-1 assume 0 == initPersonOnFloor_~floor; 1094236#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1094229#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1094226#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1094227#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1102841#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1102839#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1102836#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1102832#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1102831#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1102822#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1102817#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1101371#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1101370#L699-63 assume !(0 == isFloorCalling_~floorID); 1101367#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1101361#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1101357#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1101358#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1101363#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1101360#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1101359#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1101356#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1101353#L2854-3 assume !(0 != timeShift_~tmp___9~3); 1085557#L2945-9 assume !(1 == ~doorState~0); 1086196#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1086192#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 1086193#L2465-6 assume !(0 == ~currentFloorID~0); 1086188#L2471-6 assume ~currentFloorID~0 > 0; 1086189#L2472-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1053229#L2486-6 assume ~currentFloorID~0 > 0; 1053230#L2488-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1052974#L2489-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1050038#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1111461#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1054237#L2672-9 assume !(1 == ~currentHeading~0); 1052233#L2682-27 assume !(0 == ~currentFloorID~0); 1052234#L2682-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1051582#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1051840#L1436-3 assume !(-1 == ~expectedDirection~0); 1111598#L1448-3 assume !(1 == ~expectedDirection~0); 1111596#L1449-3 cleanup_~i~0 := 0; 1111594#L188-2 [2018-12-09 10:49:43,023 INFO L796 eck$LassoCheckResult]: Loop: 1111594#L188-2 assume !false; 1108360#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1108265#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1108208#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1108206#L196 assume 1 != cleanup_~tmp___0~0; 1100499#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1100498#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1100497#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 1100496#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1100495#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1100493#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1100491#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1100490#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1100489#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1100487#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1100485#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1100468#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1100460#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1100452#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1100451#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1100450#L699-89 assume !(0 == isFloorCalling_~floorID); 1100446#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1093831#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1093832#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1093818#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1093819#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1107676#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1107674#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1107673#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1107672#L2854-4 assume !(0 != timeShift_~tmp___9~3); 1053691#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1053692#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1056140#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 1056141#L2465-8 assume !(0 == ~currentFloorID~0); 1093215#L2471-8 assume ~currentFloorID~0 > 0; 1090169#L2472-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1093787#L699-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1053080#L726-95 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1053081#L2476-8 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1050314#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1111593#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1054223#L2672-12 assume !(1 == ~currentHeading~0); 1052421#L2682-36 assume !(0 == ~currentFloorID~0); 1052422#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1051586#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1051815#L1436-4 assume !(-1 == ~expectedDirection~0); 1111597#L1448-4 assume !(1 == ~expectedDirection~0); 1111595#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1111594#L188-2 [2018-12-09 10:49:43,031 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:43,031 INFO L82 PathProgramCache]: Analyzing trace with hash -131866910, now seen corresponding path program 1 times [2018-12-09 10:49:43,031 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:43,031 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:43,032 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:43,032 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:43,032 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:43,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:43,067 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:43,067 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:43,067 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:43,067 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:43,068 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:43,068 INFO L82 PathProgramCache]: Analyzing trace with hash -1153930592, now seen corresponding path program 1 times [2018-12-09 10:49:43,068 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:43,068 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:43,068 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:43,068 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:43,069 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:43,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:43,086 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:43,087 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:43,087 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-09 10:49:43,087 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:43,087 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-09 10:49:43,087 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-09 10:49:43,088 INFO L87 Difference]: Start difference. First operand 61899 states and 115632 transitions. cyclomatic complexity: 53735 Second operand 5 states. [2018-12-09 10:49:43,719 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:43,719 INFO L93 Difference]: Finished difference Result 112269 states and 209468 transitions. [2018-12-09 10:49:43,720 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-09 10:49:43,720 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 112269 states and 209468 transitions. [2018-12-09 10:49:44,021 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 29204 [2018-12-09 10:49:44,254 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 112269 states to 112269 states and 209468 transitions. [2018-12-09 10:49:44,254 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 112269 [2018-12-09 10:49:44,320 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 112269 [2018-12-09 10:49:44,320 INFO L73 IsDeterministic]: Start isDeterministic. Operand 112269 states and 209468 transitions. [2018-12-09 10:49:44,372 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:44,373 INFO L705 BuchiCegarLoop]: Abstraction has 112269 states and 209468 transitions. [2018-12-09 10:49:44,422 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 112269 states and 209468 transitions. [2018-12-09 10:49:45,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 112269 to 109797. [2018-12-09 10:49:45,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 109797 states. [2018-12-09 10:49:45,553 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109797 states to 109797 states and 205562 transitions. [2018-12-09 10:49:45,553 INFO L728 BuchiCegarLoop]: Abstraction has 109797 states and 205562 transitions. [2018-12-09 10:49:45,553 INFO L608 BuchiCegarLoop]: Abstraction has 109797 states and 205562 transitions. [2018-12-09 10:49:45,553 INFO L442 BuchiCegarLoop]: ======== Iteration 13============ [2018-12-09 10:49:45,553 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 109797 states and 205562 transitions. [2018-12-09 10:49:45,761 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 28508 [2018-12-09 10:49:45,761 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:45,761 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:45,763 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:45,763 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:45,764 INFO L794 eck$LassoCheckResult]: Stem: 1227484#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 1227485#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1229239#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1229582#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1228328#L385 assume 0 != main_~tmp~8; 1228329#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1225400#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1225401#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1227129#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1228354#L970 assume 0 == initPersonOnFloor_~floor; 1229035#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1224176#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1226880#L762 assume !(0 == callOnFloor_~floorID); 1226743#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1224034#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1230269#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1230268#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1224045#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1224046#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1229468#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1229117#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1225751#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1224095#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1225239#L699 assume !(0 == isFloorCalling_~floorID); 1225240#L703 assume !(1 == isFloorCalling_~floorID); 1229199#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1227594#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1225052#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1225054#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1229455#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1230191#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1230190#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1230189#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1230187#L2854 assume !(0 != timeShift_~tmp___9~3); 1230186#L2945 assume !(1 == ~doorState~0); 1230185#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1230184#L2296 assume !(1 == stopRequestedInDirection_~dir); 1229261#L2465 assume !(0 == ~currentFloorID~0); 1228918#L2471 assume ~currentFloorID~0 > 0; 1228919#L2472 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1229963#L2486 assume ~currentFloorID~0 > 0; 1230200#L2488 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1227200#L2489 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1227201#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1230300#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1230301#L2672 assume !(1 == ~currentHeading~0); 1231558#L2682 assume !(0 == ~currentFloorID~0); 1231556#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1230906#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1231554#L1436 assume !(-1 == ~expectedDirection~0); 1231550#L1448 assume !(1 == ~expectedDirection~0); 1231549#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1231548#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1231547#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1231546#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1231544#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1231542#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1231540#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1231538#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1231536#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1231535#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1231532#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1231533#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1231685#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1231684#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 1231683#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1231679#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1231678#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1231677#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1231676#L2854-1 assume !(0 != timeShift_~tmp___9~3); 1231675#L2945-3 assume !(1 == ~doorState~0); 1231674#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1231672#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 1231659#L2465-2 assume !(0 == ~currentFloorID~0); 1231660#L2471-2 assume !(~currentFloorID~0 > 0); 1232132#L2486-2 assume ~currentFloorID~0 > 0; 1227396#L2488-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1232201#L2489-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1232191#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1232192#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1234141#L2672-3 assume !(1 == ~currentHeading~0); 1312121#L2682-9 assume !(0 == ~currentFloorID~0); 1244768#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1234157#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1297842#L1436-1 assume !(-1 == ~expectedDirection~0); 1290431#L1448-1 assume !(1 == ~expectedDirection~0); 1290425#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1282294#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1282292#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1282290#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1244660#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1244731#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1244733#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1244723#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1244725#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1244712#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1244713#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1306928#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1306923#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1306924#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 1306937#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1306934#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1306926#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1306927#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1323949#L2854-2 assume !(0 != timeShift_~tmp___9~3); 1323948#L2945-6 assume !(1 == ~doorState~0); 1323947#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1323946#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 1323646#L2465-4 assume !(0 == ~currentFloorID~0); 1323648#L2471-4 assume !(~currentFloorID~0 > 0); 1323977#L2486-4 assume ~currentFloorID~0 > 0; 1227398#L2488-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1227218#L2489-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1224202#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1234308#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1234310#L2672-6 assume !(1 == ~currentHeading~0); 1231877#L2682-18 assume !(0 == ~currentFloorID~0); 1228006#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1311733#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1311247#L1436-2 assume !(-1 == ~expectedDirection~0); 1310712#L1448-2 assume !(1 == ~expectedDirection~0); 1310711#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1310706#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1310701#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1310699#L970-1 assume 0 == initPersonOnFloor_~floor; 1310671#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1297932#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1297705#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1297350#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1297336#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1297334#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1297332#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1254692#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1297328#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1297322#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1297319#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1297318#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1297317#L699-63 assume !(0 == isFloorCalling_~floorID); 1297310#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1297307#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1297303#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1297304#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1297314#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1297308#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1297305#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1297306#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1310605#L2854-3 assume !(0 != timeShift_~tmp___9~3); 1310602#L2945-9 assume !(1 == ~doorState~0); 1310601#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1310599#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 1310598#L2465-6 assume !(0 == ~currentFloorID~0); 1310597#L2471-6 assume ~currentFloorID~0 > 0; 1310305#L2472-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1310436#L2486-6 assume ~currentFloorID~0 > 0; 1310303#L2488-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1310448#L2489-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1277636#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1310426#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1228445#L2672-9 assume !(1 == ~currentHeading~0); 1228446#L2682-27 assume !(0 == ~currentFloorID~0); 1309465#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1309462#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1309460#L1436-3 assume !(-1 == ~expectedDirection~0); 1309444#L1448-3 assume !(1 == ~expectedDirection~0); 1309435#L1449-3 cleanup_~i~0 := 0; 1309430#L188-2 [2018-12-09 10:49:45,764 INFO L796 eck$LassoCheckResult]: Loop: 1309430#L188-2 assume !false; 1309423#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1297927#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1297907#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1297905#L196 assume 1 != cleanup_~tmp___0~0; 1297904#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1297903#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1297896#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 1297849#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1297840#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1297714#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1297345#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1297264#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1297262#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1297260#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1260934#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1297256#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1297251#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1297248#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1297247#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1297246#L699-89 assume !(0 == isFloorCalling_~floorID); 1297239#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1297236#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1297232#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1297234#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1297243#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1297237#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1297235#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1294425#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1294426#L2854-4 assume !(0 != timeShift_~tmp___9~3); 1311332#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1317027#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1317008#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 1317004#L2465-8 assume !(0 == ~currentFloorID~0); 1317002#L2471-8 assume ~currentFloorID~0 > 0; 1309778#L2472-8 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1316968#L2486-8 assume ~currentFloorID~0 > 0; 1309776#L2488-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1316978#L2489-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1279599#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1316955#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1228428#L2672-12 assume !(1 == ~currentHeading~0); 1226608#L2682-36 assume !(0 == ~currentFloorID~0); 1226609#L2682-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1309456#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1309454#L1436-4 assume !(-1 == ~expectedDirection~0); 1309441#L1448-4 assume !(1 == ~expectedDirection~0); 1309434#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1309430#L188-2 [2018-12-09 10:49:45,773 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:45,773 INFO L82 PathProgramCache]: Analyzing trace with hash 1809142178, now seen corresponding path program 1 times [2018-12-09 10:49:45,773 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:45,773 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:45,774 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:45,774 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:45,774 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:45,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:45,807 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:45,807 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:45,807 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:45,808 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:45,808 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:45,808 INFO L82 PathProgramCache]: Analyzing trace with hash 407542655, now seen corresponding path program 1 times [2018-12-09 10:49:45,808 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:45,808 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:45,809 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:45,809 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:45,809 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:45,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:45,825 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:45,825 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:45,826 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:45,826 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:45,826 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-12-09 10:49:45,826 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-12-09 10:49:45,826 INFO L87 Difference]: Start difference. First operand 109797 states and 205562 transitions. cyclomatic complexity: 95767 Second operand 4 states. [2018-12-09 10:49:46,837 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:46,837 INFO L93 Difference]: Finished difference Result 130365 states and 241720 transitions. [2018-12-09 10:49:46,837 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-12-09 10:49:46,837 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 130365 states and 241720 transitions. [2018-12-09 10:49:47,184 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 33104 [2018-12-09 10:49:47,453 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 130365 states to 130365 states and 241720 transitions. [2018-12-09 10:49:47,454 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 130365 [2018-12-09 10:49:47,532 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 130365 [2018-12-09 10:49:47,532 INFO L73 IsDeterministic]: Start isDeterministic. Operand 130365 states and 241720 transitions. [2018-12-09 10:49:47,594 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:47,594 INFO L705 BuchiCegarLoop]: Abstraction has 130365 states and 241720 transitions. [2018-12-09 10:49:47,655 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130365 states and 241720 transitions. [2018-12-09 10:49:50,169 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130365 to 109797. [2018-12-09 10:49:50,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 109797 states. [2018-12-09 10:49:50,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109797 states to 109797 states and 204610 transitions. [2018-12-09 10:49:50,291 INFO L728 BuchiCegarLoop]: Abstraction has 109797 states and 204610 transitions. [2018-12-09 10:49:50,291 INFO L608 BuchiCegarLoop]: Abstraction has 109797 states and 204610 transitions. [2018-12-09 10:49:50,291 INFO L442 BuchiCegarLoop]: ======== Iteration 14============ [2018-12-09 10:49:50,291 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 109797 states and 204610 transitions. [2018-12-09 10:49:50,499 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 28508 [2018-12-09 10:49:50,499 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:50,499 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:50,501 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:50,501 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:50,501 INFO L794 eck$LassoCheckResult]: Stem: 1467555#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 1467556#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1469241#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1469571#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1468361#L385 assume 0 != main_~tmp~8; 1468362#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1465532#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1465533#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1467198#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1468387#L970 assume 0 == initPersonOnFloor_~floor; 1469035#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1464351#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1466958#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1464137#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1464138#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1464918#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1464220#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1464221#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1465961#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1470184#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1465880#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1464270#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1465388#L699 assume !(0 == isFloorCalling_~floorID); 1465389#L703 assume !(1 == isFloorCalling_~floorID); 1469197#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1469198#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1465205#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1465206#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1469398#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1468759#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1464164#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1464166#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1470120#L2854 assume !(0 != timeShift_~tmp___9~3); 1470121#L2945 assume !(1 == ~doorState~0); 1467968#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1467969#L2296 assume !(1 == stopRequestedInDirection_~dir); 1469261#L2465 assume !(0 == ~currentFloorID~0); 1469262#L2471 assume ~currentFloorID~0 > 0; 1468829#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1468830#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1467633#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1467634#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1464400#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1470170#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1468489#L2672 assume !(1 == ~currentHeading~0); 1466630#L2682 assume !(0 == ~currentFloorID~0); 1466614#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1466596#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1470570#L1436 assume !(-1 == ~expectedDirection~0); 1470569#L1448 assume !(1 == ~expectedDirection~0); 1470562#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1470563#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1470558#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1470559#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1470553#L1367-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1470554#L2109-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1551459#L2130-16 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1551449#L1371-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1551431#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1551430#L699-21 assume !(0 == isFloorCalling_~floorID); 1551425#L703-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1551420#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1551416#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1551418#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 1551429#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1551421#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1551419#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1551405#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1551406#L2854-1 assume !(0 != timeShift_~tmp___9~3); 1558371#L2945-3 assume !(1 == ~doorState~0); 1558369#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1558365#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 1558362#L2465-2 assume !(0 == ~currentFloorID~0); 1558347#L2471-2 assume ~currentFloorID~0 > 0; 1524112#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1558343#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1558324#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1558311#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1558295#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1558289#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1558287#L2672-3 assume !(1 == ~currentHeading~0); 1522309#L2682-9 assume !(0 == ~currentFloorID~0); 1516056#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1514013#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1558213#L1436-1 assume !(-1 == ~expectedDirection~0); 1558210#L1448-1 assume !(1 == ~expectedDirection~0); 1558209#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1558208#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1558207#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1558188#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1512930#L1367-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1558186#L2109-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1558181#L2130-27 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1558177#L1371-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1558176#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1558175#L699-42 assume !(0 == isFloorCalling_~floorID); 1558170#L703-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1558165#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1558130#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1558131#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 1558174#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1558166#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1558132#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1558133#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1568511#L2854-2 assume !(0 != timeShift_~tmp___9~3); 1467959#L2945-6 assume !(1 == ~doorState~0); 1467942#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1467943#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 1569056#L2465-4 assume !(0 == ~currentFloorID~0); 1571112#L2471-4 assume ~currentFloorID~0 > 0; 1523389#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1469451#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1469452#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1469931#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1464377#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1571500#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1468482#L2672-6 assume !(1 == ~currentHeading~0); 1466549#L2682-18 assume !(0 == ~currentFloorID~0); 1466550#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1466509#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1566384#L1436-2 assume !(-1 == ~expectedDirection~0); 1566381#L1448-2 assume !(1 == ~expectedDirection~0); 1566380#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1566378#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1566373#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1566372#L970-1 assume 0 == initPersonOnFloor_~floor; 1566344#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1566337#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1566332#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1523509#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1566331#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1565973#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1564366#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1498795#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1564218#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1564213#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1564160#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1564159#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1564158#L699-63 assume !(0 == isFloorCalling_~floorID); 1564151#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1564148#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1564144#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1564146#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1564155#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1564149#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1564147#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1564142#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1564143#L2854-3 assume !(0 != timeShift_~tmp___9~3); 1568658#L2945-9 assume !(1 == ~doorState~0); 1568618#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1568616#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 1568615#L2465-6 assume !(0 == ~currentFloorID~0); 1568614#L2471-6 assume ~currentFloorID~0 > 0; 1523242#L2472-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1568613#L699-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1568612#L726-69 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1469937#L2476-6 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1464394#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1571165#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1468467#L2672-9 assume !(1 == ~currentHeading~0); 1466530#L2682-27 assume !(0 == ~currentFloorID~0); 1466531#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1466698#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1571313#L1436-3 assume !(-1 == ~expectedDirection~0); 1571307#L1448-3 assume !(1 == ~expectedDirection~0); 1571305#L1449-3 cleanup_~i~0 := 0; 1571303#L188-2 [2018-12-09 10:49:50,501 INFO L796 eck$LassoCheckResult]: Loop: 1571303#L188-2 assume !false; 1571302#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1571301#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1567191#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1567189#L196 assume 1 != cleanup_~tmp___0~0; 1567190#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1545512#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1545513#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 1545496#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1545497#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1545482#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1545483#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1545471#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1545472#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1539503#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1483015#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1567277#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1567269#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1567262#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1567260#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1567254#L699-89 assume !(0 == isFloorCalling_~floorID); 1567242#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1567235#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1566392#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1566394#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1567247#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1567236#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1566395#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1566390#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1566391#L2854-4 assume !(0 != timeShift_~tmp___9~3); 1467951#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1467925#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1467926#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 1469225#L2465-8 assume !(0 == ~currentFloorID~0); 1469226#L2471-8 assume ~currentFloorID~0 > 0; 1524145#L2472-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1568055#L699-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1467354#L726-95 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1467355#L2476-8 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1568019#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1568017#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1567698#L2672-12 assume !(1 == ~currentHeading~0); 1500274#L2682-36 assume !(0 == ~currentFloorID~0); 1466683#L2682-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1466673#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1571316#L1436-4 assume !(-1 == ~expectedDirection~0); 1571310#L1448-4 assume !(1 == ~expectedDirection~0); 1571304#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1571303#L188-2 [2018-12-09 10:49:50,510 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:50,511 INFO L82 PathProgramCache]: Analyzing trace with hash -1238714492, now seen corresponding path program 1 times [2018-12-09 10:49:50,511 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:50,511 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:50,511 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:50,511 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:50,511 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:50,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:50,552 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:50,552 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:50,552 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:50,553 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:50,553 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:50,553 INFO L82 PathProgramCache]: Analyzing trace with hash -1152083550, now seen corresponding path program 1 times [2018-12-09 10:49:50,553 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:50,553 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:50,553 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:50,553 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:50,553 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:50,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:50,562 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:50,562 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:50,562 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-09 10:49:50,562 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:50,562 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-09 10:49:50,562 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-09 10:49:50,562 INFO L87 Difference]: Start difference. First operand 109797 states and 204610 transitions. cyclomatic complexity: 94815 Second operand 3 states. [2018-12-09 10:49:50,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:50,970 INFO L93 Difference]: Finished difference Result 142881 states and 265717 transitions. [2018-12-09 10:49:50,970 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-09 10:49:50,970 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 142881 states and 265717 transitions. [2018-12-09 10:49:51,346 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 36104 [2018-12-09 10:49:51,637 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 142881 states to 142881 states and 265717 transitions. [2018-12-09 10:49:51,637 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 142881 [2018-12-09 10:49:51,723 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 142881 [2018-12-09 10:49:51,723 INFO L73 IsDeterministic]: Start isDeterministic. Operand 142881 states and 265717 transitions. [2018-12-09 10:49:51,790 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:51,790 INFO L705 BuchiCegarLoop]: Abstraction has 142881 states and 265717 transitions. [2018-12-09 10:49:51,855 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 142881 states and 265717 transitions. [2018-12-09 10:49:52,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 142881 to 139937. [2018-12-09 10:49:52,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 139937 states. [2018-12-09 10:49:53,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139937 states to 139937 states and 260713 transitions. [2018-12-09 10:49:53,114 INFO L728 BuchiCegarLoop]: Abstraction has 139937 states and 260713 transitions. [2018-12-09 10:49:53,114 INFO L608 BuchiCegarLoop]: Abstraction has 139937 states and 260713 transitions. [2018-12-09 10:49:53,114 INFO L442 BuchiCegarLoop]: ======== Iteration 15============ [2018-12-09 10:49:53,114 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 139937 states and 260713 transitions. [2018-12-09 10:49:53,295 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 35244 [2018-12-09 10:49:53,295 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:53,295 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:53,297 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:53,298 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:53,298 INFO L794 eck$LassoCheckResult]: Stem: 1720281#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 1720282#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1722002#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1722332#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1721093#L385 assume 0 != main_~tmp~8; 1721094#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1718250#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1718251#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1719929#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1721116#L970 assume 0 == initPersonOnFloor_~floor; 1721790#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1717034#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1719689#L762 assume !(0 == callOnFloor_~floorID); 1719558#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1716823#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1716824#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1717608#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1716903#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1716904#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1718673#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1721877#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1718592#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1716953#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1723980#L699 assume !(0 == isFloorCalling_~floorID); 1723979#L703 assume !(1 == isFloorCalling_~floorID); 1723976#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1723975#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1723974#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1723972#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1723970#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1723966#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1723964#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1723963#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1723962#L2854 assume !(0 != timeShift_~tmp___9~3); 1720684#L2945 assume !(1 == ~doorState~0); 1720685#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1720687#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 1721552#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 1722684#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1717716#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1717799#L2953 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1718849#L2727 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1721764#L2732 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1721546#L2296-1 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 1721548#L1273-2 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 1722682#L2300-1 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1717092#L2618-1 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 1719721#L2962 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1719723#L2672-2 assume !(1 == ~currentHeading~0); 1725000#L2682-6 assume !(0 == ~currentFloorID~0); 1724996#L2682-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1724992#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1724988#L1436 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1724986#L2144-1 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 1724984#L1440 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 1724980#L1448 assume !(1 == ~expectedDirection~0); 1724979#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1724978#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1724977#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1724976#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1724974#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1724972#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1724970#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1724969#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1724967#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1724966#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1724964#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1724963#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1724961#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1724957#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1724958#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1725332#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1725331#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1725329#L2854-1 assume !(0 != timeShift_~tmp___9~3); 1725328#L2945-3 assume !(1 == ~doorState~0); 1725327#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1725325#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 1725314#L2465-2 assume !(0 == ~currentFloorID~0); 1725315#L2471-2 assume !(~currentFloorID~0 > 0); 1725350#L2486-2 assume ~currentFloorID~0 > 0; 1725351#L2488-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1725799#L2489-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1717055#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1725819#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1725820#L2672-3 assume !(1 == ~currentHeading~0); 1735995#L2682-9 assume !(0 == ~currentFloorID~0); 1730997#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1725429#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1791592#L1436-1 assume !(-1 == ~expectedDirection~0); 1739603#L1448-1 assume !(1 == ~expectedDirection~0); 1739585#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1791368#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1791366#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1791364#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1730983#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1739561#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1739560#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1739559#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1739558#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1739557#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1739555#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1739554#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1739552#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1739549#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 1739551#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1757736#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1757735#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1757734#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1757732#L2854-2 assume !(0 != timeShift_~tmp___9~3); 1757731#L2945-6 assume !(1 == ~doorState~0); 1757730#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1739517#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 1739518#L2465-4 assume !(0 == ~currentFloorID~0); 1742446#L2471-4 assume !(~currentFloorID~0 > 0); 1742448#L2486-4 assume ~currentFloorID~0 > 0; 1804862#L2488-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1804896#L2489-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1767471#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1804882#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1721233#L2672-6 assume !(1 == ~currentHeading~0); 1719269#L2682-18 assume !(0 == ~currentFloorID~0); 1719270#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1719229#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1805941#L1436-2 assume !(-1 == ~expectedDirection~0); 1805942#L1448-2 assume !(1 == ~expectedDirection~0); 1805937#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1805935#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1805930#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1805929#L970-1 assume 0 == initPersonOnFloor_~floor; 1805901#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1805551#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1803042#L762-2 assume !(0 == callOnFloor_~floorID); 1803043#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1808787#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1807356#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1806011#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1757197#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1757180#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1757179#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1757178#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1757177#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1757176#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1757175#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1757169#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1757164#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1757159#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1757160#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1757171#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1757168#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1757162#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1757163#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1805978#L2854-3 assume !(0 != timeShift_~tmp___9~3); 1805979#L2945-9 assume !(1 == ~doorState~0); 1806074#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1805969#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 1805970#L2465-6 assume !(0 == ~currentFloorID~0); 1806034#L2471-6 assume !(~currentFloorID~0 > 0); 1851239#L2486-6 assume ~currentFloorID~0 > 0; 1720221#L2488-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1719982#L2489-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1717077#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1838133#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1838130#L2672-9 assume !(1 == ~currentHeading~0); 1725813#L2682-27 assume !(0 == ~currentFloorID~0); 1720738#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1812937#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1842904#L1436-3 assume !(-1 == ~expectedDirection~0); 1842900#L1448-3 assume !(1 == ~expectedDirection~0); 1842898#L1449-3 cleanup_~i~0 := 0; 1842896#L188-2 [2018-12-09 10:49:53,298 INFO L796 eck$LassoCheckResult]: Loop: 1842896#L188-2 assume !false; 1842895#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1842894#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1842893#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1842892#L196 assume 1 != cleanup_~tmp___0~0; 1842891#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1842890#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1842889#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 1842888#L2200 assume !(0 != anyStopRequested_~tmp___3~1); 1819167#L2204 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1819165#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1819163#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1819161#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1819159#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1819157#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1819122#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1819100#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1805837#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1805833#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1805830#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1805828#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1805827#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1805818#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1805819#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1807875#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1807873#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1749820#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1749798#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1749796#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1749795#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1744334#L2854-4 assume !(0 != timeShift_~tmp___9~3); 1744331#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1744325#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1744321#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 1744322#L2465-8 assume !(0 == ~currentFloorID~0); 1842754#L2471-8 assume !(~currentFloorID~0 > 0); 1842828#L2486-8 assume ~currentFloorID~0 > 0; 1824328#L2488-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1812989#L2489-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1812962#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1812958#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1812955#L2672-12 assume !(1 == ~currentHeading~0); 1812950#L2682-36 assume !(0 == ~currentFloorID~0); 1812947#L2682-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1812941#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1842909#L1436-4 assume !(-1 == ~expectedDirection~0); 1842907#L1448-4 assume !(1 == ~expectedDirection~0); 1842897#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1842896#L188-2 [2018-12-09 10:49:53,308 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:53,308 INFO L82 PathProgramCache]: Analyzing trace with hash -1727394615, now seen corresponding path program 1 times [2018-12-09 10:49:53,308 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:53,308 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:53,309 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:53,309 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:53,309 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:53,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:53,336 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:53,336 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:53,336 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:53,336 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:53,336 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:53,336 INFO L82 PathProgramCache]: Analyzing trace with hash -1092285197, now seen corresponding path program 1 times [2018-12-09 10:49:53,336 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:53,337 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:53,337 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:53,337 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:53,337 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:53,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:53,348 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:53,348 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:53,348 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-09 10:49:53,348 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:53,348 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-09 10:49:53,349 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-09 10:49:53,349 INFO L87 Difference]: Start difference. First operand 139937 states and 260713 transitions. cyclomatic complexity: 120778 Second operand 5 states. [2018-12-09 10:49:56,425 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:49:56,425 INFO L93 Difference]: Finished difference Result 237444 states and 444339 transitions. [2018-12-09 10:49:56,426 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-12-09 10:49:56,426 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 237444 states and 444339 transitions. [2018-12-09 10:49:57,104 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 61797 [2018-12-09 10:49:57,906 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 237444 states to 236392 states and 442581 transitions. [2018-12-09 10:49:57,906 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 236392 [2018-12-09 10:49:58,021 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 236392 [2018-12-09 10:49:58,021 INFO L73 IsDeterministic]: Start isDeterministic. Operand 236392 states and 442581 transitions. [2018-12-09 10:49:58,115 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:49:58,115 INFO L705 BuchiCegarLoop]: Abstraction has 236392 states and 442581 transitions. [2018-12-09 10:49:58,204 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 236392 states and 442581 transitions. [2018-12-09 10:49:59,169 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 236392 to 139115. [2018-12-09 10:49:59,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 139115 states. [2018-12-09 10:49:59,326 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139115 states to 139115 states and 258923 transitions. [2018-12-09 10:49:59,326 INFO L728 BuchiCegarLoop]: Abstraction has 139115 states and 258923 transitions. [2018-12-09 10:49:59,326 INFO L608 BuchiCegarLoop]: Abstraction has 139115 states and 258923 transitions. [2018-12-09 10:49:59,326 INFO L442 BuchiCegarLoop]: ======== Iteration 16============ [2018-12-09 10:49:59,326 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 139115 states and 258923 transitions. [2018-12-09 10:49:59,587 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35070 [2018-12-09 10:49:59,587 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:49:59,587 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:49:59,589 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:59,590 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:49:59,590 INFO L794 eck$LassoCheckResult]: Stem: 2097688#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 2097689#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 2099377#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2099732#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 2098502#L385 assume 0 != main_~tmp~8; 2098503#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2095649#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2095650#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2097321#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2098528#L970 assume 0 == initPersonOnFloor_~floor; 2099177#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2094437#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2097084#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2094225#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2094226#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2098608#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2098609#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2096073#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2096074#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2099786#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 2099787#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2095475#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2095496#L699 assume !(0 == isFloorCalling_~floorID); 2095497#L703 assume !(1 == isFloorCalling_~floorID); 2099340#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2097787#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2095310#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2095311#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2099520#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2098892#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2094251#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2094253#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2100306#L2854 assume !(0 != timeShift_~tmp___9~3); 2100307#L2945 assume !(1 == ~doorState~0); 2098114#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2098115#L2296 assume !(1 == stopRequestedInDirection_~dir); 2099396#L2465 assume !(0 == ~currentFloorID~0); 2099397#L2471 assume ~currentFloorID~0 > 0; 2098966#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2098967#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2097767#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 2097768#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2094486#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2101467#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2101464#L2672 assume !(1 == ~currentHeading~0); 2101461#L2682 assume !(0 == ~currentFloorID~0); 2101450#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2101449#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2101448#L1436 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2101443#L2144-1 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 2101444#L1440 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 2101440#L1448 assume !(1 == ~expectedDirection~0); 2101437#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2101436#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2101435#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2101434#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2101432#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2101431#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2101430#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2101429#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2101428#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2101427#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2100351#L699-21 assume !(0 == isFloorCalling_~floorID); 2100353#L703-21 assume !(1 == isFloorCalling_~floorID); 2100345#L707-21 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2100346#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2100341#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2100342#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 2100333#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2100330#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2100319#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2100321#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2100300#L2854-1 assume !(0 != timeShift_~tmp___9~3); 2100301#L2945-3 assume !(1 == ~doorState~0); 2100293#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2100294#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 2101414#L2465-2 assume !(0 == ~currentFloorID~0); 2118803#L2471-2 assume !(~currentFloorID~0 > 0); 2118801#L2486-2 assume ~currentFloorID~0 > 0; 2118802#L2488-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2123484#L2489-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2123375#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2143018#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2142982#L2672-3 assume !(1 == ~currentHeading~0); 2112755#L2682-9 assume !(0 == ~currentFloorID~0); 2112739#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2111067#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2152559#L1436-1 assume !(-1 == ~expectedDirection~0); 2152558#L1448-1 assume !(1 == ~expectedDirection~0); 2152556#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2152555#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2152554#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2142789#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2111054#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2152514#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2182179#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2142741#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2142729#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2142344#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2142345#L699-42 assume !(0 == isFloorCalling_~floorID); 2141260#L703-42 assume !(1 == isFloorCalling_~floorID); 2141257#L707-42 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2141252#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2141248#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2141249#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 2141256#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2141251#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2141250#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2141247#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2141244#L2854-2 assume !(0 != timeShift_~tmp___9~3); 2101358#L2945-6 assume !(1 == ~doorState~0); 2101359#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2101349#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 2101350#L2465-4 assume !(0 == ~currentFloorID~0); 2229607#L2471-4 assume !(~currentFloorID~0 > 0); 2229608#L2486-4 assume ~currentFloorID~0 > 0; 2097606#L2488-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2097419#L2489-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2094463#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2233000#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2098630#L2672-6 assume !(1 == ~currentHeading~0); 2096658#L2682-18 assume !(0 == ~currentFloorID~0); 2096659#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2185671#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2214379#L1436-2 assume !(-1 == ~expectedDirection~0); 2214378#L1448-2 assume !(1 == ~expectedDirection~0); 2214374#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2214372#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2214367#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2214365#L970-1 assume 0 == initPersonOnFloor_~floor; 2214338#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2214331#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2214326#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2140042#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2214325#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2214324#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2214323#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2185577#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2214322#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2218244#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2218243#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2218240#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2218241#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2230966#L699-63 assume !(0 == isFloorCalling_~floorID); 2099446#L703-63 assume !(1 == isFloorCalling_~floorID); 2098639#L707-63 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2098640#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2101830#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2101827#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 2101819#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2101815#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2101811#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2101808#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2101804#L2854-3 assume !(0 != timeShift_~tmp___9~3); 2101801#L2945-9 assume !(1 == ~doorState~0); 2101678#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2101672#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 2101673#L2465-6 assume !(0 == ~currentFloorID~0); 2198873#L2471-6 assume !(~currentFloorID~0 > 0); 2199523#L2486-6 assume ~currentFloorID~0 > 0; 2199522#L2488-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2198801#L2489-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2198748#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2198671#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2198664#L2672-9 assume !(1 == ~currentHeading~0); 2169153#L2682-27 assume !(0 == ~currentFloorID~0); 2169148#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2169137#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2198301#L1436-3 assume !(-1 == ~expectedDirection~0); 2198295#L1448-3 assume !(1 == ~expectedDirection~0); 2198287#L1449-3 cleanup_~i~0 := 0; 2198285#L188-2 [2018-12-09 10:49:59,590 INFO L796 eck$LassoCheckResult]: Loop: 2198285#L188-2 assume !false; 2198284#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2198283#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2198282#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 2198281#L196 assume 1 != cleanup_~tmp___0~0; 2198280#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2198279#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2198278#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 2198277#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2198276#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2198275#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 2198274#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2198273#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2198272#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2198271#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2169054#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2198268#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2198266#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2198265#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2198263#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2198264#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2198754#L699-89 assume !(0 == isFloorCalling_~floorID); 2198752#L703-89 assume !(1 == isFloorCalling_~floorID); 2198740#L707-89 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2198672#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2198412#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2198383#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 2198380#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2198378#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2198376#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2198375#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2198373#L2854-4 assume !(0 != timeShift_~tmp___9~3); 2198372#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 2198371#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2198369#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 2198370#L2465-8 assume !(0 == ~currentFloorID~0); 2198858#L2471-8 assume !(~currentFloorID~0 > 0); 2198970#L2486-8 assume ~currentFloorID~0 > 0; 2198968#L2488-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2198404#L2489-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2198314#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2198311#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2198310#L2672-12 assume !(1 == ~currentHeading~0); 2171579#L2682-36 assume !(0 == ~currentFloorID~0); 2171574#L2682-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2170979#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2198298#L1436-4 assume !(-1 == ~expectedDirection~0); 2198294#L1448-4 assume !(1 == ~expectedDirection~0); 2198286#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 2198285#L188-2 [2018-12-09 10:49:59,599 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:59,599 INFO L82 PathProgramCache]: Analyzing trace with hash 1153789184, now seen corresponding path program 1 times [2018-12-09 10:49:59,599 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:59,600 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:59,600 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:59,600 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:59,600 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:59,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:59,635 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:59,635 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:59,635 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:49:59,636 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:49:59,636 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:49:59,636 INFO L82 PathProgramCache]: Analyzing trace with hash 1040141207, now seen corresponding path program 1 times [2018-12-09 10:49:59,636 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:49:59,636 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:49:59,636 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:59,636 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:49:59,636 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:49:59,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:49:59,678 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:49:59,679 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:49:59,679 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-09 10:49:59,679 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:49:59,679 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-12-09 10:49:59,679 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-12-09 10:49:59,679 INFO L87 Difference]: Start difference. First operand 139115 states and 258923 transitions. cyclomatic complexity: 119812 Second operand 7 states. [2018-12-09 10:50:05,292 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:50:05,292 INFO L93 Difference]: Finished difference Result 264869 states and 486658 transitions. [2018-12-09 10:50:05,292 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-12-09 10:50:05,292 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 264869 states and 486658 transitions. [2018-12-09 10:50:06,338 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 66782 [2018-12-09 10:50:06,856 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 264869 states to 264869 states and 486658 transitions. [2018-12-09 10:50:06,856 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 264869 [2018-12-09 10:50:06,994 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 264869 [2018-12-09 10:50:06,994 INFO L73 IsDeterministic]: Start isDeterministic. Operand 264869 states and 486658 transitions. [2018-12-09 10:50:07,103 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:50:07,103 INFO L705 BuchiCegarLoop]: Abstraction has 264869 states and 486658 transitions. [2018-12-09 10:50:07,213 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 264869 states and 486658 transitions. [2018-12-09 10:50:08,429 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 264869 to 184711. [2018-12-09 10:50:08,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 184711 states. [2018-12-09 10:50:09,037 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184711 states to 184711 states and 344583 transitions. [2018-12-09 10:50:09,037 INFO L728 BuchiCegarLoop]: Abstraction has 184711 states and 344583 transitions. [2018-12-09 10:50:09,037 INFO L608 BuchiCegarLoop]: Abstraction has 184711 states and 344583 transitions. [2018-12-09 10:50:09,037 INFO L442 BuchiCegarLoop]: ======== Iteration 17============ [2018-12-09 10:50:09,037 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 184711 states and 344583 transitions. [2018-12-09 10:50:09,287 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 47278 [2018-12-09 10:50:09,288 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:50:09,288 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:50:09,290 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:50:09,290 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:50:09,290 INFO L794 eck$LassoCheckResult]: Stem: 2501735#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 2501736#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 2503427#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2503809#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 2502554#L385 assume 0 != main_~tmp~8; 2502555#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2499672#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2499673#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2501389#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2502580#L970 assume 0 == initPersonOnFloor_~floor; 2503211#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2498458#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2501148#L762 assume !(0 == callOnFloor_~floorID); 2501009#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2498244#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2498245#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2499026#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2498327#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2498328#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2500108#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2503680#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 2500024#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2499504#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2505037#L699 assume !(0 == isFloorCalling_~floorID); 2505036#L703 assume !(1 == isFloorCalling_~floorID); 2505035#L707 assume !(2 == isFloorCalling_~floorID); 2505033#L711 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2505032#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2505031#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2505030#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2505029#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2505025#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2505024#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2505023#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2505022#L2854 assume !(0 != timeShift_~tmp___9~3); 2505021#L2945 assume !(1 == ~doorState~0); 2505020#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2505018#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 2505017#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 2505009#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2505006#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2505004#L2953 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2504555#L2727 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2505003#L2732 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2504848#L2296-1 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 2504849#L1273-2 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 2504775#L2300-1 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2504767#L2618-1 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 2504556#L2962 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2504548#L2672-2 assume !(1 == ~currentHeading~0); 2504541#L2682-6 assume !(0 == ~currentFloorID~0); 2504536#L2682-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2504531#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2504527#L1436 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2504523#L2144-1 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 2504521#L1440 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 2504513#L1448 assume !(1 == ~expectedDirection~0); 2504512#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2504510#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2504509#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2504508#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2504505#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2504502#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2504497#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2504496#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2504495#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2504494#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2504492#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2504491#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2504490#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2504489#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2504488#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2504486#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2504485#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2504483#L2854-1 assume !(0 != timeShift_~tmp___9~3); 2504482#L2945-3 assume !(1 == ~doorState~0); 2504481#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2504479#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 2504480#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2504477#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2540620#L2953-1 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2539630#L2727-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2540604#L2732-2 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2540603#L2296-3 assume !(1 == stopRequestedInDirection_~dir); 2526903#L2465-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2526897#L2618-3 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 2526895#L2962-1 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2526896#L2672-5 assume !(1 == ~currentHeading~0); 2539967#L2682-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2526839#L2682-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2526836#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2526216#L1436-1 assume !(-1 == ~expectedDirection~0); 2525871#L1448-1 assume !(1 == ~expectedDirection~0); 2525859#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2525858#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2525853#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2525846#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2525847#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2555687#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2555684#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2555384#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2541120#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2541122#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2550147#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2530733#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2530729#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2530730#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2530734#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2530731#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2530732#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2539121#L2854-2 assume !(0 != timeShift_~tmp___9~3); 2539120#L2945-6 assume !(1 == ~doorState~0); 2539119#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2539112#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 2539113#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2538999#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2538733#L2953-2 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2538731#L2727-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2538730#L2732-4 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2538729#L2296-5 assume !(1 == stopRequestedInDirection_~dir); 2538691#L2465-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2538686#L2618-5 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 2532447#L2962-2 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2532448#L2672-8 assume !(1 == ~currentHeading~0); 2531788#L2682-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2531778#L2682-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2531769#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2531761#L1436-2 assume !(-1 == ~expectedDirection~0); 2531750#L1448-2 assume !(1 == ~expectedDirection~0); 2531726#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2531724#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2531719#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2531717#L970-1 assume 0 == initPersonOnFloor_~floor; 2531678#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2531664#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2527269#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2527267#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2527266#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2527265#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2527257#L1305-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2527254#L1306-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2526772#L2109-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2527251#L2130-33 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 2526756#L1310-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 2526751#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2526750#L699-63 assume !(0 == isFloorCalling_~floorID); 2513364#L703-63 assume !(1 == isFloorCalling_~floorID); 2526749#L707-63 assume !(2 == isFloorCalling_~floorID); 2526748#L711-63 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2526746#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2526745#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2526744#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 2526741#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2526739#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2526737#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2526736#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2526734#L2854-3 assume !(0 != timeShift_~tmp___9~3); 2526733#L2945-9 assume !(1 == ~doorState~0); 2526732#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2526730#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 2526731#L2465-6 assume !(0 == ~currentFloorID~0); 2527437#L2471-6 assume !(~currentFloorID~0 > 0); 2527156#L2486-6 assume ~currentFloorID~0 > 0; 2527157#L2488-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2677027#L2489-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2676512#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2676048#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2676046#L2672-9 assume !(1 == ~currentHeading~0); 2526326#L2682-27 assume !(0 == ~currentFloorID~0); 2526318#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2526313#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2527037#L1436-3 assume !(-1 == ~expectedDirection~0); 2525854#L1448-3 assume !(1 == ~expectedDirection~0); 2525828#L1449-3 cleanup_~i~0 := 0; 2525824#L188-2 [2018-12-09 10:50:09,296 INFO L796 eck$LassoCheckResult]: Loop: 2525824#L188-2 assume !false; 2525822#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2525780#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2525766#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 2525719#L196 assume 1 != cleanup_~tmp___0~0; 2518377#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2518374#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2518371#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 2518369#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2518366#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2518360#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 2518356#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2518353#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2518345#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2518342#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2518335#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2518332#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2518330#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2518328#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2518326#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2518325#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2518323#L699-89 assume !(0 == isFloorCalling_~floorID); 2507360#L703-89 assume !(1 == isFloorCalling_~floorID); 2507361#L707-89 assume !(2 == isFloorCalling_~floorID); 2541091#L711-89 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2507350#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2507351#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2507343#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 2507344#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2507332#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2507328#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2507330#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2541068#L2854-4 assume !(0 != timeShift_~tmp___9~3); 2541065#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 2541061#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2541052#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 2541053#L2465-8 assume !(0 == ~currentFloorID~0); 2541192#L2471-8 assume !(~currentFloorID~0 > 0); 2541189#L2486-8 assume ~currentFloorID~0 > 0; 2541190#L2488-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2676896#L2489-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2676782#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2676780#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2676236#L2672-12 assume !(1 == ~currentHeading~0); 2540048#L2682-36 assume !(0 == ~currentFloorID~0); 2525906#L2682-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2525902#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2525878#L1436-4 assume !(-1 == ~expectedDirection~0); 2525857#L1448-4 assume !(1 == ~expectedDirection~0); 2525827#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 2525824#L188-2 [2018-12-09 10:50:09,306 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:50:09,306 INFO L82 PathProgramCache]: Analyzing trace with hash -356796991, now seen corresponding path program 1 times [2018-12-09 10:50:09,306 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:50:09,306 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:50:09,306 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:50:09,306 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:50:09,306 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:50:09,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:50:09,340 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:50:09,340 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:50:09,340 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:50:09,340 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:50:09,340 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:50:09,340 INFO L82 PathProgramCache]: Analyzing trace with hash -1831557754, now seen corresponding path program 1 times [2018-12-09 10:50:09,340 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:50:09,340 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:50:09,341 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:50:09,341 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:50:09,341 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:50:09,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:50:09,378 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:50:09,378 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:50:09,378 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-09 10:50:09,378 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 10:50:09,378 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-12-09 10:50:09,378 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-12-09 10:50:09,378 INFO L87 Difference]: Start difference. First operand 184711 states and 344583 transitions. cyclomatic complexity: 159876 Second operand 7 states. [2018-12-09 10:50:14,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:50:14,878 INFO L93 Difference]: Finished difference Result 321216 states and 592280 transitions. [2018-12-09 10:50:14,878 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-12-09 10:50:14,878 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 321216 states and 592280 transitions. [2018-12-09 10:50:15,682 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 81629 [2018-12-09 10:50:16,337 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 321216 states to 321216 states and 592280 transitions. [2018-12-09 10:50:16,337 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 321216 [2018-12-09 10:50:16,504 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 321216 [2018-12-09 10:50:16,504 INFO L73 IsDeterministic]: Start isDeterministic. Operand 321216 states and 592280 transitions. [2018-12-09 10:50:16,636 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:50:16,636 INFO L705 BuchiCegarLoop]: Abstraction has 321216 states and 592280 transitions. [2018-12-09 10:50:16,766 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 321216 states and 592280 transitions. [2018-12-09 10:50:18,517 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 321216 to 229893. [2018-12-09 10:50:18,517 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 229893 states. [2018-12-09 10:50:18,801 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 229893 states to 229893 states and 429493 transitions. [2018-12-09 10:50:18,801 INFO L728 BuchiCegarLoop]: Abstraction has 229893 states and 429493 transitions. [2018-12-09 10:50:18,801 INFO L608 BuchiCegarLoop]: Abstraction has 229893 states and 429493 transitions. [2018-12-09 10:50:18,801 INFO L442 BuchiCegarLoop]: ======== Iteration 18============ [2018-12-09 10:50:18,801 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 229893 states and 429493 transitions. [2018-12-09 10:50:19,249 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 59368 [2018-12-09 10:50:19,249 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 10:50:19,249 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 10:50:19,251 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:50:19,251 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 10:50:19,251 INFO L794 eck$LassoCheckResult]: Stem: 3007683#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 3007684#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 3009385#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 3009771#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 3008490#L385 assume 0 != main_~tmp~8; 3008491#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3005636#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 3005637#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3007334#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3008516#L970 assume 0 == initPersonOnFloor_~floor; 3009171#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3004418#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3007093#L762 assume !(0 == callOnFloor_~floorID); 3006962#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3004205#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3004206#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3008609#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 3008610#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 3006064#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3006065#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3009829#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 3009830#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 3005461#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 3010900#L699 assume !(0 == isFloorCalling_~floorID); 3010899#L703 assume !(1 == isFloorCalling_~floorID); 3010898#L707 assume !(2 == isFloorCalling_~floorID); 3010897#L711 assume !(3 == isFloorCalling_~floorID); 3010896#L715 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~5 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 3010895#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 3010894#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3010893#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 3010892#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3010888#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 3010887#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3010886#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3010885#L2854 assume !(0 != timeShift_~tmp___9~3); 3010884#L2945 assume !(1 == ~doorState~0); 3010883#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3010881#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 3010880#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 3010872#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3010870#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 3010868#L2953 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3010563#L2727 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3010865#L2732 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3010862#L2296-1 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 3010863#L1273-2 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 3010790#L2300-1 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3010780#L2618-1 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 3010564#L2962 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3010558#L2672-2 assume !(1 == ~currentHeading~0); 3010552#L2682-6 assume !(0 == ~currentFloorID~0); 3010545#L2682-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3010541#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 3010535#L1436 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3010530#L2144-1 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 3010528#L1440 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 3010516#L1448 assume !(1 == ~expectedDirection~0); 3010513#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3010511#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3010508#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 3010506#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 3010500#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3010496#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3010490#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3010486#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3010483#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3010479#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 3010477#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 3010476#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 3010475#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3010474#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3010473#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 3010471#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3010470#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3010468#L2854-1 assume !(0 != timeShift_~tmp___9~3); 3010467#L2945-3 assume !(1 == ~doorState~0); 3010466#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3010464#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 3010465#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3010462#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 3013654#L2953-1 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3013547#L2727-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3013652#L2732-2 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3013637#L2296-3 assume !(1 == stopRequestedInDirection_~dir); 3013595#L2465-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3013551#L2618-3 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 3013548#L2962-1 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3013545#L2672-5 assume !(1 == ~currentHeading~0); 3013543#L2682-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3013539#L2682-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3013537#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 3016597#L1436-1 assume !(-1 == ~expectedDirection~0); 3016591#L1448-1 assume !(1 == ~expectedDirection~0); 3016588#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3016586#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3016584#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 3016580#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 3016574#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3016569#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3016558#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3016550#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3016542#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3016543#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 3035229#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 3014491#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 3035175#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3035177#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3035180#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 3035178#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3035173#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3035174#L2854-2 assume !(0 != timeShift_~tmp___9~3); 3048750#L2945-6 assume !(1 == ~doorState~0); 3048749#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3048747#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 3048748#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3048709#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 3048758#L2953-2 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3048682#L2727-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3048566#L2732-4 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3048395#L2296-5 assume !(1 == stopRequestedInDirection_~dir); 3048301#L2465-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3048274#L2618-5 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 3048272#L2962-2 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3048199#L2672-8 assume !(1 == ~currentHeading~0); 3048188#L2682-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3048176#L2682-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3048163#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 3048104#L1436-2 assume !(-1 == ~expectedDirection~0); 3048043#L1448-2 assume !(1 == ~expectedDirection~0); 3048025#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 3048016#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3048003#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3047830#L970-1 assume 0 == initPersonOnFloor_~floor; 3047405#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3047367#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3047360#L762-2 assume !(0 == callOnFloor_~floorID); 3035072#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3035067#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3035065#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3035063#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 3035060#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 3035061#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3036101#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3036098#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3036096#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3036093#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3036091#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 3036089#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 3036087#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 3036082#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3036084#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3036086#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 3036085#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3036080#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3036081#L2854-3 assume !(0 != timeShift_~tmp___9~3); 3053600#L2945-9 assume !(1 == ~doorState~0); 3053599#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3053597#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 3053598#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3053567#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 3054412#L2953-3 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3053442#L2727-6 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3054379#L2732-6 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3054377#L2296-7 assume !(1 == stopRequestedInDirection_~dir); 3054104#L2465-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3005235#L2618-7 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 3049429#L2962-3 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3049430#L2672-11 assume !(1 == ~currentHeading~0); 3049461#L2682-33 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3049247#L2682-35 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3049242#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 3049239#L1436-3 assume !(-1 == ~expectedDirection~0); 3049236#L1448-3 assume !(1 == ~expectedDirection~0); 3049228#L1449-3 cleanup_~i~0 := 0; 3049226#L188-2 [2018-12-09 10:50:19,260 INFO L796 eck$LassoCheckResult]: Loop: 3049226#L188-2 assume !false; 3049225#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3049223#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3049222#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 3049103#L196 assume 1 != cleanup_~tmp___0~0; 3049101#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 3048882#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 3048883#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 3048848#L2200 assume !(0 != anyStopRequested_~tmp___3~1); 3048849#L2204 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 3049097#L699-85 assume !(0 == isFloorCalling_~floorID); 3049090#L703-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 3049086#L726-85 anyStopRequested_#t~ret71 := isFloorCalling_#res;anyStopRequested_~tmp___2~2 := anyStopRequested_#t~ret71;havoc anyStopRequested_#t~ret71; 3049081#L2211 assume 0 != anyStopRequested_~tmp___2~2;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3049072#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3049070#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 3049068#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3049066#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3049064#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 3049061#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 3049062#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3049175#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3049170#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3049166#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3049162#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3049158#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 3049155#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 3049153#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 3049149#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3049150#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3049154#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 3049151#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3049152#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3053887#L2854-4 assume !(0 != timeShift_~tmp___9~3); 3053885#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 3053883#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3053880#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 3053881#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3053841#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 3053713#L2953-4 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3053712#L2727-8 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3053711#L2732-8 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3053709#L2296-9 assume !(1 == stopRequestedInDirection_~dir); 3049933#L2465-9 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3049922#L2618-9 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 3049400#L2962-4 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3049253#L2672-14 assume !(1 == ~currentHeading~0); 3049252#L2682-42 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3049246#L2682-44 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3049241#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 3049237#L1436-4 assume !(-1 == ~expectedDirection~0); 3049235#L1448-4 assume !(1 == ~expectedDirection~0); 3049227#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 3049226#L188-2 [2018-12-09 10:50:19,270 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:50:19,271 INFO L82 PathProgramCache]: Analyzing trace with hash 438836784, now seen corresponding path program 1 times [2018-12-09 10:50:19,271 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:50:19,271 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:50:19,271 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:50:19,271 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:50:19,271 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:50:19,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:50:19,305 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:50:19,306 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 10:50:19,306 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 10:50:19,306 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 10:50:19,306 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:50:19,306 INFO L82 PathProgramCache]: Analyzing trace with hash -467514106, now seen corresponding path program 1 times [2018-12-09 10:50:19,306 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 10:50:19,306 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 10:50:19,307 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:50:19,307 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 10:50:19,307 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 10:50:19,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-12-09 10:50:19,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-12-09 10:50:19,751 WARN L180 SmtUtils]: Spent 399.00 ms on a formula simplification. DAG size of input: 207 DAG size of output: 168 [2018-12-09 10:50:19,868 WARN L180 SmtUtils]: Spent 109.00 ms on a formula simplification that was a NOOP. DAG size: 134 [2018-12-09 10:50:19,875 INFO L216 LassoAnalysis]: Preferences: [2018-12-09 10:50:19,876 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-12-09 10:50:19,876 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-12-09 10:50:19,876 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-12-09 10:50:19,876 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-12-09 10:50:19,876 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:19,876 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-12-09 10:50:19,876 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-12-09 10:50:19,877 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product01_true-unreach-call_true-termination.cil.c_Iteration18_Loop [2018-12-09 10:50:19,877 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-12-09 10:50:19,877 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-12-09 10:50:19,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,899 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,900 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,901 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,902 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,903 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,904 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,905 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,906 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,909 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,910 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,916 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,920 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,921 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,922 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,923 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,924 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,925 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,925 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,926 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,927 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,928 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,929 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,930 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,932 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,935 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,936 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,936 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,939 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,943 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,944 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,944 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,945 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,946 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,947 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,948 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,949 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,950 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,952 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,953 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,955 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,956 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,957 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,958 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,960 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,961 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,962 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,964 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,965 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,966 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,967 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,968 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,969 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,970 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,971 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,972 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,976 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,977 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,978 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,979 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,980 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,981 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,982 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,983 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,984 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,987 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,988 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,989 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,990 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,991 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,992 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,992 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,993 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,994 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,995 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,995 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,996 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:19,997 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,021 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,022 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,023 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,025 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,029 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,031 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,032 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,033 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,037 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,038 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,039 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,040 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,041 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,042 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,042 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,043 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,047 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,048 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,059 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,063 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,064 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,065 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,066 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,072 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,073 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:20,503 WARN L180 SmtUtils]: Spent 105.00 ms on a formula simplification. DAG size of input: 40 DAG size of output: 34 [2018-12-09 10:50:20,534 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-12-09 10:50:20,535 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:20,745 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:20,745 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:20,751 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:20,751 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:20,768 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:20,769 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:20,772 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:20,772 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret103=0} Honda state: {ULTIMATE.start_timeShift_#t~ret103=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:20,788 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:20,788 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:20,791 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:20,791 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret85=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret85=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:20,808 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:20,808 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:20,811 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:20,811 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___8~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___8~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:20,831 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:20,831 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:20,834 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:20,834 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret33=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret33=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:20,850 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:20,850 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:20,853 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:20,853 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:20,869 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:20,869 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:20,871 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:20,871 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret76=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret76=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:20,887 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:20,887 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:20,889 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:20,889 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret32=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret32=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:20,908 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:20,908 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:20,910 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:20,910 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret24=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret24=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:20,926 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:20,926 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:20,928 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:20,928 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___1~5=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___1~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:20,944 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:20,944 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:20,949 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:20,949 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~16=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~16=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:20,965 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:20,965 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:20,970 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:20,970 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_#res=0, ~calls_0~0=0, ULTIMATE.start_isFloorCalling_~retValue_acc~5=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~8=0} Honda state: {ULTIMATE.start_isFloorCalling_#res=0, ~calls_0~0=0, ULTIMATE.start_isFloorCalling_~retValue_acc~5=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:20,989 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:20,989 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:20,992 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:20,992 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=0} Honda state: {~expectedDirection~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,010 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,011 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,012 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,012 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,028 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,028 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,030 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,030 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret84=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret84=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,045 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,045 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,047 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,047 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,062 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,063 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,065 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,065 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___9~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___9~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,084 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,084 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,086 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,086 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___2~3=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___2~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,102 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,102 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,104 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,104 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret77=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret77=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,119 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,119 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,121 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,121 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret70=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret70=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,137 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,137 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,139 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,139 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret104=0} Honda state: {ULTIMATE.start_timeShift_#t~ret104=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,154 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,154 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,156 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,156 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret74=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret74=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,171 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,171 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,173 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,173 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~19=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~19=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,188 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,188 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,190 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,190 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~10=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~10=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,382 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,383 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,386 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,386 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~calls_1~0=7, ULTIMATE.start_anyStopRequested_~tmp___2~2=7} Honda state: {~calls_1~0=7, ULTIMATE.start_anyStopRequested_~tmp___2~2=7} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,400 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,401 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,403 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,403 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret88=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret88=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,418 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,418 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,420 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,420 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret25=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret25=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,435 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,435 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,437 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,437 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_~floorID=0, ULTIMATE.start_buttonForFloorIsPressed_#in~floorID=0} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_~floorID=0, ULTIMATE.start_buttonForFloorIsPressed_#in~floorID=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,452 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,452 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,454 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,454 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#res=0, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~21=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#res=0, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~21=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,469 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,469 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,471 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,471 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret111=0} Honda state: {ULTIMATE.start_timeShift_#t~ret111=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,487 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,487 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,488 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,489 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___3~2=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___3~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,512 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,513 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,514 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,514 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret75=0} Honda state: {ULTIMATE.start_isIdle_#t~ret75=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,530 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,530 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,531 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,532 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret83=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret83=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,547 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,547 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,549 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,549 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret109=0} Honda state: {ULTIMATE.start_timeShift_#t~ret109=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,564 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,565 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,566 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,567 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___3~4=0} Honda state: {ULTIMATE.start_timeShift_~tmp___3~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,582 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,583 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,584 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,584 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret89=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret89=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,600 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,600 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,601 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,601 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret22=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret22=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,617 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,617 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,620 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,620 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,639 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,639 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,641 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,641 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret78=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret78=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,656 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,656 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,658 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,658 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret110=0} Honda state: {ULTIMATE.start_timeShift_#t~ret110=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,673 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,673 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,676 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,676 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___3~1=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___3~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,695 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,695 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,696 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,697 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret82=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret82=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,711 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,711 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,714 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,714 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~7=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,732 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,733 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,735 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,735 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___8~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___8~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,754 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,754 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,755 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,756 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret71=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret71=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,770 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,770 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,772 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,772 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___5~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___5~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,787 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,788 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,790 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,790 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_timeShift_~tmp___9~3=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_timeShift_~tmp___9~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,804 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,804 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,807 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,807 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~23=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~23=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,826 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,826 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,827 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,828 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___8~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___8~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,842 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,842 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,844 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,844 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret23=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret23=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,859 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,859 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,861 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,861 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret79=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret79=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,876 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,876 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,878 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,878 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___1~4=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___1~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,893 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,893 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,895 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,895 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp~18=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp~18=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 55 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 55 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,911 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,911 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,913 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,913 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~20=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 56 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 56 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,928 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,928 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:21,930 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 10:50:21,930 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret107=0} Honda state: {ULTIMATE.start_timeShift_#t~ret107=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 57 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 57 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,945 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 10:50:21,945 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_93de9ad2-bb6a-4060-9270-4a751db982c1/bin-2019/uautomizer/z3 Starting monitored process 58 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 58 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:21,961 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-12-09 10:50:21,962 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 10:50:22,415 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-12-09 10:50:22,416 INFO L216 LassoAnalysis]: Preferences: [2018-12-09 10:50:22,417 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-12-09 10:50:22,417 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-12-09 10:50:22,417 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-12-09 10:50:22,417 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-12-09 10:50:22,417 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 10:50:22,417 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-12-09 10:50:22,417 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-12-09 10:50:22,417 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product01_true-unreach-call_true-termination.cil.c_Iteration18_Loop [2018-12-09 10:50:22,417 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-12-09 10:50:22,417 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-12-09 10:50:22,420 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,421 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,422 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,423 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,424 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,425 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,426 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,429 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,430 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,431 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,435 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,436 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,437 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,438 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,439 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,440 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,440 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,441 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,442 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,443 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,443 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,444 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,445 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,446 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,446 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,447 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,450 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,451 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,452 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,453 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,453 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,458 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,459 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,460 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,460 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,461 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,463 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,465 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,465 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,466 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,467 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,468 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,469 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,469 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,470 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,471 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,474 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,475 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,475 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,476 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,477 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,478 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,482 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,483 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,484 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,489 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,490 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,491 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,497 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,498 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,499 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,500 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,501 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,502 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,503 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,504 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,505 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,509 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,510 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,511 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,512 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,512 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,517 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,518 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,518 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,519 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,520 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,521 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,538 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,546 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,547 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,548 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,551 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,552 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,553 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,554 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,557 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,558 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,562 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,563 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,564 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,565 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,565 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,566 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,567 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,571 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,572 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,577 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,578 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,579 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,590 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,591 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,592 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 10:50:22,989 WARN L180 SmtUtils]: Spent 102.00 ms on a formula simplification. DAG size of input: 40 DAG size of output: 34 [2018-12-09 10:50:22,994 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-12-09 10:50:22,997 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-12-09 10:50:22,998 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:22,999 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:22,999 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,000 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,000 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,000 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,001 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,001 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,002 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,003 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,003 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,003 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,003 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,003 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,003 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,003 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,003 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,004 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,004 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,004 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,004 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,004 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,004 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,005 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,005 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,005 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,005 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,005 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,005 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,006 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,006 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,006 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,006 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,006 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,006 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,006 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,006 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,007 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,007 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,007 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,007 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,007 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,007 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,007 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,007 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,008 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,008 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,008 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,008 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,008 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,008 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,008 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,008 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,009 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,009 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,009 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,009 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,009 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,009 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,009 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,010 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,010 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,010 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,010 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,010 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,011 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,011 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,011 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,011 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,011 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,011 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,011 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,012 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,012 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,012 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,012 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,012 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,012 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,012 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,012 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,013 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,013 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,013 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,013 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,013 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,013 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,013 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,014 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,014 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,015 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,015 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,015 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,015 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,015 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,015 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,016 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,016 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,016 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,016 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,016 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,017 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,017 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,017 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,017 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,017 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,017 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,017 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,017 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,018 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,018 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,018 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,018 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,018 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,018 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,018 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,018 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,019 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,019 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,019 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,019 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,019 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,019 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,020 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,020 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,020 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,020 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,020 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,021 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,021 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,021 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,021 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,021 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,021 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,021 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,022 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,022 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,022 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,022 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,022 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,022 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,022 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,023 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,023 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,023 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,023 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,023 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,024 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,024 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,024 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,024 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,024 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,024 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,024 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,025 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,025 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,025 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,025 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,025 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,025 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,025 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,025 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,026 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,026 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,026 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,026 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,026 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,026 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,026 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,027 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,027 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,027 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,027 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,027 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,027 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,028 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,028 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,028 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,028 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,028 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,028 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,029 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,029 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,029 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,029 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,029 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,029 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,029 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,029 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,030 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,030 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,030 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,030 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,030 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,030 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,030 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,030 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,031 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,031 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,031 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,031 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,031 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,032 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,032 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,032 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,032 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,032 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,032 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,032 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,033 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,033 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,033 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,033 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,033 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,033 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,033 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,034 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,034 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,034 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,034 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,034 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,034 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,034 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,035 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,035 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,035 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,035 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,035 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,036 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,036 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,036 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,036 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,036 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,036 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,037 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,037 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,037 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,037 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,037 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,037 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,037 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,038 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,038 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,038 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,038 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,039 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,039 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,039 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,039 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,039 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,039 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,039 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,040 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,040 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,040 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,040 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,040 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,040 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,040 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,040 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,041 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,041 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,041 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,041 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,041 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,041 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,042 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,042 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,042 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,042 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,042 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,042 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,043 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,043 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,043 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,043 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,043 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,043 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,043 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,044 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,044 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,044 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,044 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,044 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,044 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,044 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,045 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,045 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,045 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,045 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,045 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,045 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,045 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,046 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,046 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,046 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,046 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,046 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,046 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,047 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,047 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,047 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,047 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,047 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,047 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,047 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,047 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,048 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,048 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,048 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,048 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,048 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,048 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,048 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,049 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,049 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,049 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,049 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,049 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,049 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,050 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,050 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,050 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,050 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,051 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,051 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,051 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,052 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,052 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,052 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,052 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,052 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,052 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,052 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,053 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,053 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,053 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,053 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,053 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,053 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,053 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,053 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,054 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,054 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,054 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,054 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,054 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,054 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,055 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,055 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,055 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,055 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,055 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,056 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,056 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,056 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,056 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,056 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,056 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,056 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,057 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,057 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,057 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,057 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,057 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,057 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,057 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,057 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,058 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,058 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,058 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,058 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,058 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,058 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,058 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,059 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,059 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,059 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,059 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,059 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,060 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,060 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,060 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,060 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,060 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,060 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,060 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,060 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,061 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,061 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,061 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,061 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,061 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,061 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,061 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,062 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,062 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,062 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,062 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,062 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,063 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,063 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,063 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,063 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,063 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,063 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,064 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,064 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,064 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,064 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,064 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,064 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,064 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,064 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,065 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,065 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,065 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,066 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,066 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,066 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,066 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,066 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,066 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,066 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,067 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,067 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,067 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,067 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,067 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,067 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,067 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,067 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,068 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,068 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,068 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,068 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,068 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,068 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,068 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,069 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,069 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,069 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,069 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,069 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,070 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,070 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,070 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,070 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,070 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,070 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,070 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,071 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,071 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,071 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,071 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,071 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,071 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,071 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,071 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,072 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,072 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,072 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,072 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,072 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,072 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-12-09 10:50:23,073 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,073 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-12-09 10:50:23,073 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,074 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,074 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,075 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,075 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,075 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,075 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,075 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,075 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,075 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,076 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,076 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,076 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,076 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,114 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,114 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,114 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,114 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,114 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,115 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 10:50:23,115 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 10:50:23,115 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 10:50:23,115 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 10:50:23,115 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 10:50:23,115 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 10:50:23,115 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 10:50:23,116 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 10:50:23,116 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 10:50:23,117 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-12-09 10:50:23,119 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-12-09 10:50:23,120 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-12-09 10:50:23,121 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-12-09 10:50:23,121 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-12-09 10:50:23,121 INFO L518 LassoAnalysis]: Proved termination. [2018-12-09 10:50:23,122 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~0) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~0 Supporting invariants [] [2018-12-09 10:50:23,122 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-12-09 10:50:23,145 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 10:50:23,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:50:23,306 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-12-09 10:50:23,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 10:50:23,357 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-12-09 10:50:23,390 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 10:50:23,395 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-12-09 10:50:23,395 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 229893 states and 429493 transitions. cyclomatic complexity: 199604 Second operand 5 states. [2018-12-09 10:50:24,804 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 229893 states and 429493 transitions. cyclomatic complexity: 199604. Second operand 5 states. Result 289261 states and 539781 transitions. Complement of second has 8 states. [2018-12-09 10:50:24,805 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-12-09 10:50:24,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-12-09 10:50:24,812 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 9691 transitions. [2018-12-09 10:50:24,814 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9691 transitions. Stem has 175 letters. Loop has 53 letters. [2018-12-09 10:50:24,815 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-09 10:50:24,816 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9691 transitions. Stem has 228 letters. Loop has 53 letters. [2018-12-09 10:50:24,816 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-09 10:50:24,817 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9691 transitions. Stem has 175 letters. Loop has 106 letters. [2018-12-09 10:50:24,818 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-09 10:50:24,818 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 289261 states and 539781 transitions. [2018-12-09 10:50:25,666 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-09 10:50:25,666 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 289261 states to 0 states and 0 transitions. [2018-12-09 10:50:25,666 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-12-09 10:50:25,666 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-12-09 10:50:25,666 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-12-09 10:50:25,666 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:50:25,666 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 10:50:25,667 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 10:50:25,667 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-12-09 10:50:25,667 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-12-09 10:50:25,667 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2018-12-09 10:50:25,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 10:50:25,667 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-12-09 10:50:25,667 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-12-09 10:50:25,667 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-12-09 10:50:25,668 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-09 10:50:25,668 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-12-09 10:50:25,668 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-12-09 10:50:25,668 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-12-09 10:50:25,668 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-12-09 10:50:25,668 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 10:50:25,668 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 10:50:25,668 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 10:50:25,668 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 10:50:25,668 INFO L442 BuchiCegarLoop]: ======== Iteration 19============ [2018-12-09 10:50:25,669 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-12-09 10:50:25,669 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-09 10:50:25,669 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-12-09 10:50:25,675 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 09.12 10:50:25 BoogieIcfgContainer [2018-12-09 10:50:25,675 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-12-09 10:50:25,676 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-12-09 10:50:25,676 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-12-09 10:50:25,676 INFO L276 PluginConnector]: Witness Printer initialized [2018-12-09 10:50:25,676 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.12 10:49:07" (3/4) ... [2018-12-09 10:50:25,680 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-12-09 10:50:25,680 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-12-09 10:50:25,681 INFO L168 Benchmark]: Toolchain (without parser) took 83082.83 ms. Allocated memory was 1.0 GB in the beginning and 5.8 GB in the end (delta: 4.8 GB). Free memory was 950.6 MB in the beginning and 3.2 GB in the end (delta: -2.3 GB). Peak memory consumption was 2.5 GB. Max. memory is 11.5 GB. [2018-12-09 10:50:25,681 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 979.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-12-09 10:50:25,682 INFO L168 Benchmark]: CACSL2BoogieTranslator took 423.75 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 116.9 MB). Free memory was 950.6 MB in the beginning and 1.1 GB in the end (delta: -135.9 MB). Peak memory consumption was 48.3 MB. Max. memory is 11.5 GB. [2018-12-09 10:50:25,682 INFO L168 Benchmark]: Boogie Procedure Inliner took 126.38 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 48.3 MB). Peak memory consumption was 48.3 MB. Max. memory is 11.5 GB. [2018-12-09 10:50:25,682 INFO L168 Benchmark]: Boogie Preprocessor took 141.46 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 978.8 MB in the end (delta: 59.3 MB). Peak memory consumption was 59.3 MB. Max. memory is 11.5 GB. [2018-12-09 10:50:25,683 INFO L168 Benchmark]: RCFGBuilder took 4584.48 ms. Allocated memory was 1.1 GB in the beginning and 1.4 GB in the end (delta: 278.4 MB). Free memory was 978.8 MB in the beginning and 967.2 MB in the end (delta: 11.7 MB). Peak memory consumption was 300.0 MB. Max. memory is 11.5 GB. [2018-12-09 10:50:25,683 INFO L168 Benchmark]: BuchiAutomizer took 77799.11 ms. Allocated memory was 1.4 GB in the beginning and 5.8 GB in the end (delta: 4.4 GB). Free memory was 967.2 MB in the beginning and 3.2 GB in the end (delta: -2.3 GB). Peak memory consumption was 2.1 GB. Max. memory is 11.5 GB. [2018-12-09 10:50:25,683 INFO L168 Benchmark]: Witness Printer took 4.50 ms. Allocated memory is still 5.8 GB. Free memory is still 3.2 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-12-09 10:50:25,686 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 979.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 423.75 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 116.9 MB). Free memory was 950.6 MB in the beginning and 1.1 GB in the end (delta: -135.9 MB). Peak memory consumption was 48.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 126.38 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 48.3 MB). Peak memory consumption was 48.3 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 141.46 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 978.8 MB in the end (delta: 59.3 MB). Peak memory consumption was 59.3 MB. Max. memory is 11.5 GB. * RCFGBuilder took 4584.48 ms. Allocated memory was 1.1 GB in the beginning and 1.4 GB in the end (delta: 278.4 MB). Free memory was 978.8 MB in the beginning and 967.2 MB in the end (delta: 11.7 MB). Peak memory consumption was 300.0 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 77799.11 ms. Allocated memory was 1.4 GB in the beginning and 5.8 GB in the end (delta: 4.4 GB). Free memory was 967.2 MB in the beginning and 3.2 GB in the end (delta: -2.3 GB). Peak memory consumption was 2.1 GB. Max. memory is 11.5 GB. * Witness Printer took 4.50 ms. Allocated memory is still 5.8 GB. Free memory is still 3.2 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 19 terminating modules (18 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 18 modules have a trivial ranking function, the largest among these consists of 7 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 77.7s and 19 iterations. TraceHistogramMax:1. Analysis of lassos took 5.3s. Construction of modules took 25.3s. Büchi inclusion checks took 16.1s. Highest rank in rank-based complementation 3. Minimization of det autom 19. Minimization of nondet autom 0. Automata minimization 14.6s AutomataMinimizationTime, 17 MinimizatonAttempts, 676564 StatesRemovedByMinimization, 17 NontrivialMinimizations. Non-live state removal took 11.7s Buchi closure took 1.0s. Biggest automaton had 229893 states and ocurred in iteration 17. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 335059 SDtfs, 653164 SDslu, 644356 SDs, 0 SdLazy, 44365 SolverSat, 4765 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 25.3s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI17 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital197 mio100 ax100 hnf100 lsp17 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq217 hnf89 smp100 dnf348 smp46 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 2ms VariablesStem: 0 VariablesLoop: 2 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 55 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 1.0s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...